You bring up a good point - if you are following your policies and procedures but, they no longer adhere to the regulation, there is still a problem. Regulations are constantly changing and are also subject to "revised clarification" which sometime differs from when a regulation is initially put in place. While it is difficult to keep up, training workshops and summaries put forth by various entities may assist in highlighting key changes.
