A treatment reduces exposure but leaves residual risk above tolerance. What should the practitioner recommend?

1. Let the implementation team silently raise tolerance
2. Evaluate further treatment or escalate to the authorized decision-maker
3. Close the risk because the control project finished
4. Remove the residual estimate from the report