A team wants to compare two risk treatments with different costs, implementation times, and residual exposure. What is the best decision basis?

1. A documented comparison against business priorities, obligations, and risk tolerance
2. The lower purchase price alone
3. The option described in the longest proposal
4. The vendor with the largest booth