Capability 06 / 14 · Detect and respond

Know what a changed clause affects before risk spreads.

EKOS ComplianceAvailable now, with regulatory previewStage: Watch

Compare versions, isolate material changes, mark dependent evidence stale, follow reviewed relationships, and turn the blast radius into an actionable report.

IMPACT / RPT-00723 affected records

Password Policy

v2 to v3 comparison · passage-level diff

Credentials for privileged accounts must be rotated every60 days and stored in the approved vault.§5.4changed clause · was: 90 days

3 downstream records flagged for review.

  • Credential Management Procedure

    implements · cites the rotation clause · suggested: review §2

    stale
  • Quarterly Access Review Evidence

    evidences · proof predates the new interval

    stale
  • Vendor Access Standard

    depends_on · neighbor within one reviewed hop

    check

Unchanged citations migrated forward silently. Only records supported by the changed clause entered the report, each with its reason.

Illustrative product view · a version change and its blast radius

The problem

A small document revision can affect procedures, controls, evidence, and owners, but broad manual rereads create noise and still miss dependencies.

What EKOS does

EKOS aligns old and new passages, moves unchanged citations forward, marks changed dependencies stale, and traverses reviewed relationships to produce affected items with reasons and suggested actions.

  • Passage-level version alignment
  • Silent migration for unchanged citations
  • Stale relationship and provenance states
  • Graph-based blast radius with inclusion reasons
  • Controlled report and item lifecycles

How it works

  1. When a new version arrives, EKOS aligns the old and new documents at the passage and section level.

  2. Evidence that still cites unchanged text is silently re-pointed to the new version, so no review work is created for it.

  3. Relationships, provenance, and mappings supported by changed or removed passages are marked stale and routed back into focused analysis.

  4. EKOS walks the reviewed graph to build the blast radius, recording why each affected item was included, its severity, and a suggested next action.

  5. Items move through an open, acknowledged, and resolved or dismissed lifecycle, and a report cannot be resolved while unresolved work remains inside it.

Business outcome

Teams receive a focused and explainable worklist instead of rereading every related artifact after each revision.

Proof and human control

Each report records its trigger, affected items, severity, inclusion reason, suggested next action, and controlled item lifecycle.

Example in practice

A password policy changes its rotation interval. EKOS marks relationships supported by the changed clause as stale and opens a report for the implementing procedure and related evidence.

Scope today

The internal document-change path is available. External regulatory orchestration remains preview, and impact quality depends on the reviewed relationships and ownership data available to the analysis.

Next step

See your own documents become a trail of proof.

A working session with the EKOS team: bring a policy set, a framework, and a hard question. We will walk the loop end to end.