What's the why behind the proposed change? Is it to meet a compliance requirement? Is it based on learning from a recent incident? Something else?