A data-loss prevention control blocks legitimate transactions without clear escalation. What should the manager do?

1. Disable the control permanently without assessment
2. Count every block as a prevented incident
3. Ask users to disguise all protected data
4. Assess false positives and define approved exception and tuning procedures