Identify systems, people, data, locations, exclusions and dependencies so ownership is unambiguous. Apply this specifically to technical controls, operational readiness and evidence from realistic testing. Record the owner, evidence, decision and review date so another qualified person can verify the result.