Limit 'Updates Required' to critical risk items only. Wrap everything else up in an annual review
Make CL a 12-month accreditation which only goes to 'updates required' if key risk data goes out of date - insurances, accounts, SSiP, all categories expired. Leave expired policies - environment, drugs and alcohol, equality etc etc etc - for an a...