A project sponsor asks the risk practitioner to guarantee that no security loss will occur. What should the practitioner explain?

1. An approved assessment guarantees zero loss
2. Insurance guarantees that every consequence is recoverable
3. A low risk rating means monitoring can stop permanently
4. Risk management supports informed decisions under uncertainty rather than eliminating every possible loss