---
name: framework-update-watch
type: reactive
owner: human
trigger: "compliance framework publishes new version"
frequency: "quarterly"
---

**Purpose:** Track changes to the compliance framework (SOC2, HIPAA, GDPR, ISO 27001) and assess impact on current controls.

**Procedure:**
- [ ] Review changelog for the applicable framework version
- [ ] Identify new or modified controls
- [ ] Assess gap between current state and new requirements
- [ ] Create remediation plan for any new gaps

**Signals:**
- Framework body publishes update
- Auditor communicates new requirements
- Industry peers report compliance changes
