Should we make available the full content of a given procedure, for example an IT system instruction?

ANSWER

I see no objection to disclosing such a document. However, if the organisation (here: the processor) wishes to avoid sharing content not directly related to the entrusted data, it may consider sending the controller only those sections of the given procedure that are relevant to the processor's processing of the data entrusted by the controller.