Security objectives conflict with a revenue launch. What should governance primarily provide?

1. Clear decision rights and a risk-informed escalation path
2. A rule that security staff automatically own every business decision
3. A requirement to avoid documenting the conflict
4. A rule that revenue always overrides all obligations