After recovery, a business owner wants to skip lessons learned because operations are busy. What is the best recommendation?

1. Archive the incident without reviewing material gaps
2. Require a blame-focused meeting before any service resumes
3. Reopen every recovered system automatically
4. Conduct a proportionate review while evidence is fresh and assign improvements