Develop standard operating procedures to ensure program officials assess third-party certifications, establish a risk-based sampling plan for selecting files to review, and document the results of the compliance reviews.