A risk workshop includes IT staff but excludes business owners and legal specialists. What is the main assessment concern?

1. The workshop automatically becomes independent assurance
2. The assessment must use only financial formulas
3. IT evidence cannot be used at all
4. Important business impacts and obligations may be missed