A business changes a critical process after the annual assessment. What is the best response?

1. Assess only the unchanged systems
2. Perform a proportionate reassessment of the changed process and dependencies
3. Reuse the previous risk score without validation
4. Wait automatically until next year