When implementing 62304 -2015 standard for Medical Software Product. there is a chapter about Legacy Software and a gap analysis is needed to be done to encounter deliverables and activities of SDLC. Do you have a method to do the gap analysis , Do you have a flow of the process for binding a risk level according to the finding of deliverable ?.