A new control reduces fraud but creates a single point of service failure. What should the practitioner assess?

1. The new and changed risks introduced by treatment
2. Whether the control has a recognizable brand
3. A guarantee that every security control improves availability
4. Only the original fraud reduction