A CISO's reporting line prevents material risks from reaching senior leadership because an operations manager filters all reports. What is the primary concern?

1. Insufficient independence and access for effective security oversight
2. Insufficient detail in the security team's incident correlation rules
3. Excessive independence of the business risk owners from the operations manager
4. Insufficient dashboard colors