Before making significant changes to an operational system, it is essential to perform an Impact Analysis. This step helps in understanding the potential consequences of the change on the organization's operations and security. It allows stakeholders to evaluate the risks and benefits associated with the deployment of the update. Without this analysis, the company could inadvertently introduce new vulnerabilities or negatively affect business operations. Although approval processes and maintenance windows are important, they come into play after understanding the impact. Updating diagrams and policies is part of documenting the change, which typically happens after the approval and planning stages.