What should you do if you suspect non compliance?

What should you do if you suspect non compliance?

• Document and discuss with management. 
• Risk assessment. 
• Obtain evidence.