A control owner changes a threshold without approval, reducing reported breaches. What should be reviewed?

1. The authorized threshold, rationale, evidence, and governance of the change
2. Deletion of the previous threshold history
3. Only whether the graph is easier to read
4. Automatic acceptance because breach counts fell