An employee's access review is approved based only on job title, although actual duties changed. What improvement is needed?

1. Automatically approve every inherited grant
2. Review only password age
3. Review effective entitlements against current business responsibilities
4. Remove all review evidence after approval