A business unit defines its own risk framework that conflicts with enterprise reporting requirements. What should the practitioner seek?

1. Removal of every local requirement
2. Complete independence with no mapping to enterprise criteria
3. Use of whichever framework has the most pages
4. A consistent enterprise approach with justified local tailoring