"When changes in the types of information occur or the way information is collected and maintained, it must be recorded in the system documentation." . . . .