When a regulatory change significantly affects an ongoing project, thefirst step should be to perform an impact analysis and update the business case.This helps the organization understand how the change influences cost, timelines, compliance, and value delivery.

Only after understanding the impact should actions such as seeking reapproval, changing scope, or applying for exemptions be considered. This aligns with the principle of informed decision-making in IT governance.