# Control wake review

URL: /systems/trust-and-governance/controls/control-wake-review · Id: `control:control-wake-review`

> A definition Change that wakes a control opens a Task for that control’s owner before it merges.

A definition [Change](/business/nouns/change) that wakes a control opens a [Task](/business/nouns/task) for that control’s owner before it merges.

## Satisfies
| Criterion | Text |
| --- | --- |
| [SOC2 CC3.4](/systems/trust-and-governance/criteria/soc2/cc3-4) | The entity identifies and assesses changes that could significantly affect the system of internal control. |
| [SOC2 CC5.1](/systems/trust-and-governance/criteria/soc2/cc5-1) | The entity selects and develops control activities that mitigate risks to its objectives to acceptable levels. |

## Implemented by
- [Compliance](/workflows/processes/compliance)
- [Verification](/code/verification)
- [Compliance](/systems/compliance)

## Test
| Step | Rule |
| --- | --- |
| Kind | Preventive: it stops the failure before it happens. |
| Select | Every merged definition Change that adds a personal or health field, an upstream, or a Human Worker. |
| Assert | Each has a Task opened before merge and closed by the woken control’s owner. |

## Owner
[Compliance Officer](/agents/legal/compliance-officer), [Legal Team](/agents/legal).

## Example
A Change adds patient intake fields to a clinic-scheduling [SaaS](/products/templates/saas), which wakes the health data agreements control. A Task opens for the [Contracts Manager](/agents/legal/contracts-manager), who closes it before the Change merges.