A division wants to accept a risk whose potential loss exceeds its delegated approval limit. What is the appropriate next step?

1. Escalate to the authority defined by enterprise risk governance
2. Accept it temporarily without an owner
3. Split the risk record into smaller entries to avoid the limit
4. Let the control operator approve it because they understand the system