An architecture board approves cloud designs without security participation until final implementation. What governance change is most useful?

1. Suspend all architecture work indefinitely
2. Include security requirements and review in early architecture decisions
3. Perform only a penetration test after launch
4. Give the CISO sole control of every business design