A second-line risk team is asked to operate the control it must independently challenge. What should be considered?

1. Whether the control has a technical name
2. Automatic transfer of all assurance to the supplier
3. The conflict between operational ownership and oversight responsibilities
4. Whether the team has enough dashboard licenses