There is new requirment in which we have to make Clear rules around Salesforce access by roles, and clear processes for approval to changes and also have to changes in permision set

@Anchal Kanungo you can run Optimizer to help to check the functionalities in your org. After do a list related to critical needs and start from there.