A team encrypts data in transit but exposes it to excessive authorized users after arrival. What gap remains?

1. The need to use a longer transport-encryption key as the only remedy
2. Access governance and appropriate use of the decrypted data
3. A need to rename the transport protocol
4. A requirement to accept the access design because the connection is encrypted