Regulatory Change
What is Regulatory Change?
A modification to existing regulations or introduction of new regulations that may affect an organization's compliance obligations.
Terms that appear alongside regulatory change
Each of these is named in at least one of the same controls as regulatory change. The number is how many controls name both.
- policy 4 shared controls
- lessons learned 4 shared controls
- nist 4 shared controls
- continuous improvement 2 shared controls
- benchmarking 2 shared controls
- audit 2 shared controls
- access control 2 shared controls
- change management 2 shared controls
Frameworks that govern regulatory change
What the standards actually require on regulatory change
Requirements naming regulatory change across 6 standards, quoted from the control text.
The RTO ensures its staff and clients are informed of changes to legislative and regulatory requirements that affect the services delivered.
australia-standards-for-registered-training-organisations-2015::8.6 · Clause 8.6 Staff and clients told of regulatory changes →Establish cybersecurity governance and policy structures appropriate to retail industry characteristics per the NRF Cybersecurity and Data Privacy Framework guidance and supporting NIST CSF alignment.
NRFCS-1 · Retail Cybersecurity Governance, Policy, and Regulatory Change Management →The bank can generate aggregate risk data for a broad range of on-demand and ad hoc requests, including in stress, for changing internal needs and for supervisory queries, and to assess emerging risks, forecasting, stress testing and scenario analysis.
bcbs-239::P6 · Principle 6: adaptability of aggregation →Have subject matter experts review the security policies and instructions for adequacy at least once a year, weighing organisational and technical changes in how the cloud service is delivered and legal or regulatory change, and approve revised versions before...
C5-SP-02 · Review and Approval of Policies and Instructions →Management identifies and documents the risks to development, acquisition and maintenance continuously and iteratively, starting at the onset of each project so that risk effects and mitigation options are assessed early, involving stakeholders with business p...
ffiec-it-examination-handbook::DAM-III.A · III.A Risk Identification (Development, Acquisition, and Maintenance) →ISMAP Assessment positions ISMAP within the comprehensive Japanese and international cloud security regulatory landscape. (1) External Assessment by ISMAP-Approved Auditor: CSP must undergo annual third-party assessment by an audit organisation on the ISMAP Pr...
ISMAP-Assessment-ExternalAuditor-AnnualReview-CustomerTransparency-Coord-FedRAMP-IRAP-GCloud-PIPA-ISO27017 · ISMAP Assessment - External ISMAP-Approved Auditor + Annual Review + Customer Information and Transparency + Coordination FedRAMP/UK G-Cloud/Australia IRAP/Singapore MTCS + ISO 27017 + PIPA + Japan Digital Agency →Questions people ask about regulatory change
What is Regulatory Change?
Why is Regulatory Change important for compliance?
Which compliance frameworks address Regulatory Change?
Where can I learn more about Regulatory Change?
See how Regulatory Change applies across compliance frameworks
Our platform maps 1,016 frameworks with 316K cross-framework control mappings. Explore how this concept is addressed across standards.