A team buys insurance for a project risk. What should the manager still evaluate?

1. That insurance automatically authorizes noncompliance
2. Coverage limits, retained consequences, and any required controls
3. That the project can stop monitoring the risk forever
4. That every risk consequence has disappeared