A team proposes storing encryption keys with unrestricted access beside the protected data. What should the manager require?

1. A longer data filename
2. Encrypt the data a second time using another equally unrestricted colocated key
3. Audit key access annually while leaving unrestricted access unchanged
4. Appropriate key access separation, protection, and lifecycle controls