What should auditors identify regarding regulatory changes?

Auditors should identify all regulatory changes since the last policy update because this comprehensive approach ensures that the organization remains compliant with the latest requirements and standards. Identifying every regulatory change helps in evaluating the potential impact on the organization's operations, risk management strategies, and controls in place. It allows auditors to assess whether the organization has effectively adapted to these changes to maintain compliance, minimize risks, and foster a culture of accountability and transparency. This thorough identification is crucial for maintaining legal and operational integrity across the entire organization, rather than limiting the focus to only minor updates or changes affecting specific departments.