LR-301f · Module 2

Change Implementation Workflow

3 min read

The change implementation workflow converts the impact assessment into operational changes — updated controls, modified evidence processes, and revised compliance matrix entries. The workflow is structured: update the matrix, modify the control, verify evidence production, and validate through testing. Each step produces a record that documents the compliance program's response to the regulatory change.

Do This

  • Document every regulatory change response in the compliance matrix changelog — traceability from regulation to implementation is the audit trail
  • Verify that modified controls produce compliant evidence before declaring implementation complete — untested changes are unverified changes
  • Communicate changes to affected control owners immediately — a control owner who does not know the requirement changed cannot comply with it

Avoid This

  • Update the compliance matrix without updating the controls — the matrix is a reflection of controls, not a substitute for them
  • Declare implementation complete based on the matrix update alone — the matrix change is documentation, the control change is compliance
  • Implement changes silently — affected stakeholders need to know what changed and why so they can adjust their practices