A new control reduces fraud but slows order fulfillment beyond an agreed service requirement. What should the manager recommend?

1. Evaluate an alternative or adjusted control using the combined business and risk objectives
2. Ignore fulfillment because security controls have no business consequences
3. Remove fraud protection without evaluating alternatives
4. Declare the control successful based only on fraud reduction