Could someone please help me with these two topics: Change Request and New Risk ?

Q1: what is the first thing that a PM should do when he/she receives a change request from a stakeholder?

Perform impact analysis

(OR)

Submit it to the CCB and then perform impact analysis

Q2. RISK:What are the steps to be followed when a new risk has been identified during project execution?

Thanks in advance.