Which of the following would best help an enterprise select an appropriate risk response?
1) An analysis of change in the risk environment
2) An analysis of risk that can be transferred were it not eliminated
3) An analysis of the likelihood and impact of various risk scenarios
4) An analysis of control costs and benefits