Regulatory assessment must begin by establishing scope. Option B determines whether the regulation applies by examining processed data, affected jurisdictions, users, and deployment purpose. Without this analysis, clause mapping could apply irrelevant obligations or omit applicable ones. Option E establishes the platform’s existing compliance capabilities, including audit records, retention controls, access governance, data residency, and compliance-export functionality. Anthropic’s Trust Center provides control and certification information, while the Compliance API supports programmatic access to activity and governance records. Options A and D occur after regulatory clauses have been mapped and gaps identified. Option C follows prioritization and approval of remediation actions.

Study Guide references/topics: Regulatory applicability; compliance affordance inventory; control mapping; gap assessment; residual risk; remediation sequencing.