A manager suppresses adverse risk reports to protect performance bonuses. What is the most significant concern?

1. The reports contain too many pages
2. An incentive and culture problem undermining transparent risk decisions
3. The technical controls must all be ineffective
4. The risk register uses a monthly schedule