A new regulation changes an existing reporting requirement. What should the analyst do before recommending the scope of the change?

1. Approve implementation without consulting the change authority
2. Update only the requirement's heading
3. Assume every component must be replaced
4. Trace affected processes, requirements, components, and tests to assess impact