A risk practitioner finds that managers define acceptable exposure differently to improve their scores. What should be strengthened?

1. Consistent criteria, oversight, and transparent challenge of rating changes
2. Removal of all context from ratings
3. Only the spreadsheet's password
4. Automatic acceptance of every manager's definition