Change management
Regulatory Change Management
How to identify, assess and implement changes to laws, rules, contracts and standards.
Why this matters
How to identify, assess and implement changes to laws, rules, contracts and standards.
Collect reliable inputs
Sources may include regulators, licensing bodies, official gazettes, contractual notices, industry associations and legal advisers. Alerts are inputs, not decisions.
Assess applicability
Determine which entity, jurisdiction, product, customer group, process, system or record is affected. Document why a change is applicable, not applicable or still uncertain.
Translate requirements
Convert the change into specific actions: policy updates, system configuration, forms, disclosures, training, vendor terms, reporting or record-retention changes.
Track implementation
Assign owners, dependencies, target dates, testing and evidence. Where deadlines are fixed, escalation should occur before the organization reaches the due date without a workable plan.
Confirm effectiveness
Completion is not only publishing a revised policy. Verify that affected people, systems and controls changed and that the required evidence is being produced.
Questions to document
- Which obligations and processes are in scope?
- Who owns the activity and who independently reviews it?
- What record demonstrates that the activity operated?
- What happens when the control fails or circumstances change?
Related planning tools
Use the local planning tools to turn the concepts into a structured working note.