Tracking Regulatory Changes
Monitor and respond to regulatory and framework changes.
Tracking Regulatory Changes
Regulatory changes can significantly impact your compliance program. This guide covers how to track changes and respond effectively.
Change Feed
The change feed shows updates from all your sources:
Feed Layout
| Column | Description |
|---|---|
| Date | When published/updated |
| Source | Where it came from |
| Title | Change headline |
| Relevance | Impact on your program |
| Status | New, Reviewed, Actioned |
Filtering Changes
Filter the feed by:
- Framework - Specific framework updates
- Relevance - High, Medium, Low
- Status - New, Reviewed, Actioned
- Date Range - Time period
Change Types
Regulatory Updates
New or amended regulations:
- Effective dates
- Compliance requirements
- Enforcement guidance
- Exemptions or clarifications
Framework Changes
Updates to standards:
- New control requirements
- Revised guidance
- Version updates
- Mapping changes
Enforcement Actions
Actions against other organizations:
- Lessons learned
- Common violations
- Penalty information
- Industry patterns
Industry Guidance
Best practice updates:
- Implementation guidance
- FAQs and clarifications
- Industry interpretations
- Expert commentary
Not every change requires action. Review to determine relevance and impact before responding.
Reviewing Changes
Identify New Changes
Check the feed for unreviewed items.
Assess Relevance
Determine if the change applies to you.
Evaluate Impact
Understand what needs to change.
Document Decision
Record your assessment.
Take Action
Create tasks or workflows as needed.
Impact Assessment
Relevance Questions
Ask yourself:
- Does this apply to our frameworks?
- Does it affect our industry?
- Does it impact our operations?
- Is there an effective date?
Impact Levels
| Level | Description | Action |
|---|---|---|
| High | Major change required | Immediate workflow |
| Medium | Some updates needed | Plan remediation |
| Low | Minor or no change | Document awareness |
| None | Not applicable | Mark as reviewed |
Responding to Changes
Creating Action Items
For high-impact changes:
- Click "Create Action"
- Choose action type:
- Gap (new compliance gap)
- Workflow (remediation plan)
- Task (simple action)
- Configure the action
- Assign and schedule
Linking to Gaps
If a change creates a new gap:
- Click "Create Gap"
- Select affected framework
- Document the requirement
- Begin remediation
Documentation
Always document:
- What you reviewed
- Your assessment
- Actions taken
- Rationale for decisions
Change Calendar
Effective Dates
Track upcoming effective dates:
- New regulation effective dates
- Framework version transition dates
- Compliance deadlines
- Audit milestones
Calendar View
See changes on a calendar:
- Go to Intelligence
- Click "Calendar"
- View changes by effective date
- Plan accordingly
Change Notifications
Alert Configuration
Set up alerts for:
- New high-relevance changes
- Effective date reminders
- Framework-specific updates
- Custom keywords
Notification Channels
Receive alerts via:
- In-app notifications
- Email (immediate or digest)
- Mobile push (if enabled)
Don't ignore high-relevance alerts. They indicate changes that likely require action.
Tracking History
Review History
See all changes reviewed:
- Who reviewed
- When reviewed
- Assessment made
- Actions taken
Audit Trail
For compliance purposes:
- All reviews are logged
- Demonstrates awareness
- Shows response timeline
- Supports audit evidence
Best Practices
Regular Review
Establish a review cadence:
- Daily: Quick scan of new items
- Weekly: Detailed review of relevant changes
- Monthly: Trend analysis
Delegation
Assign review responsibilities:
- By framework
- By topic area
- By source type
Documentation
Document your process:
- Review criteria
- Assessment methodology
- Response procedures
- Escalation paths
Common Change Scenarios
New Framework Version
When a framework updates:
- Review the changes
- Assess gap impact
- Update controls mapping
- Revise documentation
- Plan transition timeline
New Regulation
When new regulations emerge:
- Determine applicability
- Identify requirements
- Gap analysis
- Remediation planning
- Implementation
Enforcement Action
Learning from others:
- Review the action
- Identify relevant lessons
- Self-assess for similar issues
- Implement improvements
- Document awareness
Common Questions
How quickly should I review changes?
| Relevance | Review Timeline |
|---|---|
| High | Within 24-48 hours |
| Medium | Within 1 week |
| Low | Within 1 month |
What if I'm unsure about impact?
- Mark for follow-up
- Consult with legal/compliance
- Research industry response
- Err on side of caution
Can I delegate reviews?
Yes, consider:
- Assigning by framework
- Rotating responsibility
- Requiring sign-off for high-impact
Next Steps
- Resolving Conflicts - Handle conflicts
- Sources - Configure sources
- Workflows - Create remediation plans