A control test identifies one failure in a high-consequence transaction path. What should determine the response?

1. The percentage of passing tests alone
2. Automatic dismissal because only one failure occurred
3. The failure's business significance, scope, cause, and residual exposure
4. Immediate replacement of every unrelated control