A company purchases cyber insurance but continues operating the service. What response does the policy primarily represent?

1. Complete avoidance of the underlying activity
2. Elimination of all residual risk
3. Transfer or sharing of specified financial consequences
4. A detective technical control