(Changing the requirements and/or specifications) represents what kind of risk management response strategies:

transfer risk, accept risk, avoid risk and reduce risk

Given the limited information  - I think it could be either avoiding or diversification depending on the nature of the change. I would however suggest the "mitigate (not in the list)" response as it fits the situation better than the three.