A patch is urgently required for an exploited vulnerability. How should change management respond?

1. Patch unrelated systems without assessing applicability
2. Use the authorized emergency change process
3. Wait for the next annual review regardless of exposure
4. Bypass all records and rollback planning