Documentation Control—11​.10 (k)

"(k) Use of appropriate controls over systems documentation including:

(1) Adequate controls over the distribution of, access to, and use of documentation for system operation and maintenance.

(2) Revision and change control procedures to maintain an audit trail that documents time-sequenced development and modification of systems documentation."

The controls placed on system documentation must be defined by procedures. Requirements for recording and tracking system documentation changes must also be defined.