who will certify annually on October 1 the continued need for any approved waivers and that compensating controls are in place and remain effective IAW