Regulatory change triage checklist

Identify the controlling signal

Record the primary source, issuing body, publication date, legal status and affected population before interpretation begins.

• Distinguish law, proposal, guidance and supervisory commentary
• Confirm consultation and commencement dates
• Separate allegations from findings

Assess operational relevance

Map the development to obligations, products, customers, systems, accountable owners and existing change initiatives.

• Identify affected business units and licences
• Test whether current controls address the signal
• Record dependencies and evidence gaps

Set the response pathway

Allocate an owner, significance rating and next review date proportionate to the development.

• Monitor, review or commence action
• Document the rationale for the rating
• Escalate material issues through established governance