A company implements DLP that alerts on sensitive exports but no team reviews the alerts. What is the main control deficiency?

1. All exports should be classified as harmless because alerts exist
2. Detection is not connected to accountable evaluation and response
3. DLP removes the need for data ownership
4. A dashboard license automatically satisfies incident handling requirements