Operating procedures and process descriptions form the basis of any operational activities. From the requirements of GDPR to an assessment of efficiency of current work processes the description of your internal process and the internal controls in place to ensure these procedures are followed by qualified staff is essential to any operation. As it is an requirement to maintain a good overview for your data controllers and specific employees roles and responsibilities. Without the design and process descriptions. Identifying any standards and resulting best practices will not exist without a proper description how information is process through the organisation.