An enterprise inventory records systems but not the business processes they support. What should be added to improve risk decisions?

1. Business ownership, criticality, data, and dependency relationships
2. A universal maximum risk rating
3. Only office addresses
4. Only device serial-number formatting