An assessment is made of the alternatives in relation to the objectives and constraints, if you like it -
more information here. Risks are identified and resolved (risk management, methodology for cost-effective selection of permission sources, assessment of other risk-related situations where money may be lost due to the continued development of the system (decisions to terminate / continue work on the project, etc.)