Change Management
CG-02Complete a compliance review memo for each material change
How Leela would run itEvent-driven · each material change, within five business days of triage
From the policy libraryThe requirement
For each material change the Compliance Officer completes a detailed compliance review within five business days, covering legal compliance, disclosure updates, fair lending and unfair or deceptive practice risk, data privacy, vendor governance, required documentation and customer communications, and training. Where the change introduces a new vendor or materially changes one, vendor due diligence is completed before approval and recorded in the same memo. The memo ends with a recommendation to approve, approve with conditions, or reject.
- Applies
- Tell Leela about your company to see whether this applies.
- Status
- Setup needed
Tell Leela how you handle it today, or hand it over: see what’s next.
The work
Work through each review area against the change request, complete vendor due diligence where a vendor is involved, document the findings, and issue the recommendation before the approval decision.
What Leela keepsThe evidence this obligation leaves, as the work happens
Listed from the policy libraryContents
- 01Compliance review memoFindings by review area, vendor diligence results where applicable, recommendation, date
- 02Vendor due diligence fileLicensing, SOC 2 or equivalent, regulatory history, contract terms checklist
Evidence
Compliance review memo
Change Management §4.3, §5
2
of 2 records
The work and the records come from this obligation in the policy library.