A business unit exceeds tolerance repeatedly but receives only routine monthly reporting. What should the practitioner recommend?

1. Hide the trend by averaging it with unrelated low risks
2. Escalation and response timing proportionate to the threshold and exposure
3. Accept the risk personally to close the report
4. Wait for the next annual review regardless of consequence