A process owner disputes the impact estimate for an outage. What is the best response?

1. Average unrelated system scores without explanation
2. Let the security team impose revenue figures without discussion
3. Remove the process from assessment
4. Review assumptions and business evidence jointly before finalizing the assessment