{"id":11053,"date":"2026-09-21T09:41:28","date_gmt":"2026-09-21T09:41:28","guid":{"rendered":"https:\/\/groupe-novallia.com\/blog\/being-up-to-date-with-regulatory-monitoring-does-not-mean-being-compliant\/"},"modified":"2026-09-21T09:41:28","modified_gmt":"2026-09-21T09:41:28","slug":"being-up-to-date-with-regulatory-monitoring-does-not-mean-being-compliant","status":"publish","type":"post","link":"https:\/\/groupe-novallia.com\/en\/blog\/being-up-to-date-with-regulatory-monitoring-does-not-mean-being-compliant\/","title":{"rendered":"Being up to date with regulatory monitoring does not mean being compliant"},"content":{"rendered":"<p>We have created your regulatory registry; your applicable documents are organized and structured by domains and subdomains in your customized database.<\/p>\n<p>This isn&#8217;t the end of the story; what follows is no longer about information but about action: What does this text specifically require of my website, and am I currently in compliance?<\/p>\n<p>That&#8217;s where the bulk of the work lies; it&#8217;s a step that monitoring alone cannot handle.<\/p>\n<h2>Compliance Monitoring and Assessment: Two Distinct Steps<\/h2>\n<p>Regulatory monitoring identifies applicable regulations and tracks changes to them, while compliance assessment allows for a determination, requirement by requirement, of whether each obligation is actually being met, and links each conclusion to evidence or an action plan leading to compliance.<\/p>\n<p>The ISO 14001 and ISO 45001 standards explicitly require this in paragraph 9.1.2 of each standard. The organization must establish an evaluation process, determine its frequency and method, take action when necessary, and maintain documented information on the results. No specific frequency is mandated: the organization determines it based on the significance and risk associated with each requirement.  <\/p>\n<p>It is important to note that a certification audit verifies that this process exists and is functioning. It does not verify compliance with every legal requirement. A certified site may therefore have regulatory nonconformities. The two systems do not measure the same thing.   <\/p>\n<h2>Why does this compliance process take so long?<\/h2>\n<h3>Three challenges come into play.<\/h3>\n<h4>The volume of texts.<\/h4>\n<p>For some sites that require a database of regulations on the environment and occupational health and safety, the number of applicable regulations can sometimes exceed one thousand. The HSE scope covers European, national, and local regulations. Only a portion of these applies to the site, and this must be demonstrated.  <\/p>\n<h4>Granularity.<\/h4>\n<p>A section of a law may contain several distinct requirements. Declaring a section \u201cnoncompliant\u201d does not specify which requirement is problematic or what action should be taken. Each section must be broken down into its individual requirements in order to address it correctly and comprehensively. Each requirement must be addressed separately.   <\/p>\n<h4>Arbitration, or the work plan.<\/h4>\n<p>When there are multiple texts to review, you need to decide where to start and then justify those choices in the management review.<\/p>\n<h2>Case Study: RATP&#8217;s Tramway Operations<\/h2>\n<p>Val\u00e9rie Rouillon is the HSE Manager at RATP Group. For the tramway division, she ensures compliance with occupational safety, health, and environmental standards, tailored to the specific needs of maintenance and rolling stock. She also oversees contractual service quality indicators and prepares monthly compliance reports presented at management reviews.  <\/p>\n<p>As part of a competitive bidding process, the RATP awarded this support contract to Novallia. The three main expectations compared to the previous service provider were: expert and readily available assistance, prompt support for specific issues, and a more user-friendly platform. <\/p>\n<h3>The process took place in four stages.<\/h3>\n<h4>1. Review of the texts and definition of the Environment and Safety regulatory framework.<\/h4>\n<p>It&#8217;s a lengthy step, but it&#8217;s the one that determines the reliability of everything else: a requirement that isn&#8217;t identified at this stage will never be evaluated.<\/p>\n<h4>2. Creating the tree structure in the NV Compliance web tool<\/h4>\n<p>The folder structure in NV Compliance is fully customizable\u2014by database (Environment and Safety), by site, by city, or by equipment type\u2014and is designed to make it easy to navigate and manage documents.<\/p>\n<h4>3. Analysis and Categorization of Applicable Laws and Requirements<\/h4>\n<p>The goal is to interpret each text and determine its applicability. Since Novallia\u2019s engineers have extensive field experience, working with them on this step saves a considerable amount of time. <\/p>\n<h4>4. Regulatory Compliance Assessment<\/h4>\n<p>Novallia\u2019s support in assessing compliance for documents that need to be reviewed and those that are non-compliant\u2014including the preparation of action plans\u2014is one of its most highly valued services. It saves time and improves efficiency thanks to the expertise and experience of Novallia\u2019s teams. <\/p>\n<h3>Val\u00e9rie Rouillon&#8217;s takeaway:<\/h3>\n<blockquote><p>\u201cWe now know where to focus our efforts, instead of getting \u2018swamped\u2019 in paperwork.\u201d<\/p><\/blockquote>\n<p>The work is prepared in advance by Novallia\u2019s engineers and legal experts, which prevents the creation of meaningless formalities. The compliance rate, tracked in NV Compliance as a graph, serves as a milestone during management reviews. And every document that is non-compliant or requires verification has an action plan.  <\/p>\n<blockquote><p>\u201cThe year we switched systems was a very good one, thanks to the consistency of the sessions and the dedication of the Novallia team. We chose to invest a little more to gain a great deal in terms of clarity, efficiency, and peace of mind.\u201d<\/p><\/blockquote>\n<h3>Getting Help with Your Compliance Assessment: Five Questions to Ask<\/h3>\n<p>Whether you handle this step in-house or outsource it to a service provider, these questions will help define your needs.<\/p>\n<h4><em>Is the assessment conducted at the article level or the requirement level?<\/em><\/h4>\n<p>\ud83d\udc49 The second one allows you to link each discrepancy to a specific action.<\/p>\n<h4><em>Who performs the pieces?<\/em><\/h4>\n<p>Translating a text into specific requirements requires an understanding of the business, its facilities, and its constraints.<br \/>\nDoes the service provider&#8217;s point of contact remain the same over time? Continuity prevents the need to explain the site&#8217;s context all over again with every interaction. <\/p>\n<h4><em>How do discrepancies become action plans that are followed through?  <\/em><\/h4>\n<p>\ud83d\udc49 A nonconformity that has been identified but for which no one has been assigned responsibility and no deadline has been set remains a nonconformity. These must be addressed! <\/p>\n<h4><em>What metrics will you be able to present at the executive review meeting?  <\/em><\/h4>\n<p>\ud83d\udc49 The compliance status must be legible to those who evaluate the evidence.<\/p>\n<h3>Read the full case study here: <a href=\"https:\/\/groupe-novallia.com\/lp\/cas-client-ratp\/\">the full case study<\/a><\/h3>\n<p>Background, four-step method, results: the RATP tramway business case study is available for download.<\/p>\n<h2>And in your organization: Is compliance assessment handled internally, outsourced, or a combination of both?<\/h2>\n","protected":false},"excerpt":{"rendered":"<p>We have created your regulatory registry; your applicable documents are organized and structured by domains and subdomains in your customized database. This isn&#8217;t the end of the story; what follows is no longer about information but about action: What does this text specifically require of my website, and am I currently in compliance? That&#8217;s where [&hellip;]<\/p>\n","protected":false},"author":3,"featured_media":11054,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"content-type":"","footnotes":""},"categories":[138],"tags":[123,124,183,135,125],"class_list":["post-11053","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-monitoring-and-regulatory-compliance","tag-france-en","tag-morocco","tag-senegal-en","tag-switzerland","tag-tunisia"],"acf":[],"_links":{"self":[{"href":"https:\/\/groupe-novallia.com\/en\/wp-json\/wp\/v2\/posts\/11053","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/groupe-novallia.com\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/groupe-novallia.com\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/groupe-novallia.com\/en\/wp-json\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/groupe-novallia.com\/en\/wp-json\/wp\/v2\/comments?post=11053"}],"version-history":[{"count":0,"href":"https:\/\/groupe-novallia.com\/en\/wp-json\/wp\/v2\/posts\/11053\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/groupe-novallia.com\/en\/wp-json\/wp\/v2\/media\/11054"}],"wp:attachment":[{"href":"https:\/\/groupe-novallia.com\/en\/wp-json\/wp\/v2\/media?parent=11053"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/groupe-novallia.com\/en\/wp-json\/wp\/v2\/categories?post=11053"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/groupe-novallia.com\/en\/wp-json\/wp\/v2\/tags?post=11053"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}