Sam is a Chief Information Security Officer (CISO). He's been suffering from insomnia. During an especially grueling board meeting, Sam falls asleep and misses a crucial email from his team resulting in a delay that leads to a security breach in which Pat Plaintiff's records are lost. If Pat sues Sam for negligence (assuming that other issues such as jurisdiction and standing are resolved), which of the following is true:

1.Sam will be held strictly liable for Pat's injuries.

2. Sam's conduct will be compared to reasonable person of ordinary sensibilities.

3. None of these are true statements.

4. Sam's conduct will be compared to reasonable CISO standard under his duty as a professional.