A mitigation reduces likelihood but creates a new dependency on a single specialist. What should the manager record?

1. Only the original likelihood reduction
2. Automatic closure of every related risk
3. A claim that all mitigation is harmful
4. The residual exposure and secondary risk introduced by the response