This answer states that bringing the requirement to the product owner's attention is what the BA should do after discovering that several users indicate they use multi-factor authentication (MFA) on their phones to log in to existing systems while other users indicate they access existing systems with only username and password for conducting user interviews with the support team as part of a migration to Salesforce at Cloud Kicks. A product owner is a person who represents the voice of the customer or the stakeholder, and who is responsible for defining and prioritizing the requirements for a product or a project. Bringing the requirement to the product owner's attention means that the BA informs and discusses with the product owner about the different preferences or expectations of users regarding MFA for logging in to Salesforce. Bringing the requirement to the product owner's attention is what the BA should do after discovering this difference among users because it helps the BA to align and validate the requirement with the product owner, and to determine and propose a solution or an alternative for MFA for logging in to Salesforce. References:
https://trailhead.salesforce.com/en/content/learn/modules/salesforce-business-analyst-quick-look/use-stakeholder