It will be different for every company but you need processes that ensure that the PRRC has regulatory oversight where applicable. You can document these processes in your strategy for regulatory compliance, also as Chris mentions in the PRRC job description. You need audit and review processes to ensure that the measures are effective. Good change control is also key, trying to stop others changing things without PRRC oversight. Easier said than done I admit, almost impossible in my company to get some departments to comply eg transport. Good luck!