In the Type(s) of Compliance Requirement(s) field in the Findings workbook, do I enter all the types of compliance requirements, or only the primary type of compliance requirement?

In most cases, there will only be one (primary) type of compliance requirement entered for a finding. The auditor should report the type of compliance requirement the auditor was testing which generated the finding.

The option to report more than one type can be exercised if the auditor tested more than one type of compliance requirement at the same time.