What does this do? Why are we making this change? How do I test this? Key decisions and Risk Assessment: Things to consider: How will this affect security? How will this affect performance? Does this change any APIs?