The IT personnel review the proposed change and the corresponding published policies, to determine whether the proposed change violates any of the published policies.
The analyzing operation 402 considers the business need for the proposed systems policy change.