A critical process has no recent loss history. What is the most defensible interpretation for assessment?

1. The annual occurrence rate is certainly zero forever
2. Only risks with a past internal loss may be recorded
3. Historical absence is useful context but does not prove negligible future exposure
4. All controls can be removed immediately