A regulatory compliance dashboard reports noncompliance for a resource control. What is the appropriate next step?

1. Investigate the mapped requirement, resource evidence, and applicable remediation or exception process
2. Grant every user unrestricted access
3. Delete the finding without correcting or justifying it
4. Assume the dashboard alone provides a final legal determination