Which of the following should occur when implementing an IT infrastructure change that takes risks into consideration?