A policy exception is approved for six months, but no review owner is recorded. What is the best correction?

1. Delete the expiry to simplify administration
2. Transfer review to an unrelated end user
3. Assign accountable review and expiry handling with the risk owner
4. Assume the control will fix itself at expiry