All employees receive the same awareness course, but finance staff continue approving fraudulent bank-detail changes. What is the best improvement?

1. Remove finance staff from all training
2. Measure only attendance certificates
3. Role-specific training and workflow controls for payment-change verification
4. Repeat the generic course daily without changing content