It is prudent to include a third-party audit (outside of the company structure) to evaluate compliance on a periodic basis – as sometimes the assurance of an internal employee may not be accurate. Since the gaps in compliance were related to both federal and state regulations (CAA, CWA, EPCRA), the process of self-disclosure allowed the client to avoid a monetary citation.