A quarterly access review is signed by a manager who cannot see what the listed privileged roles permit. What is the key concern?

1. The reviewer may be unable to make an informed access appropriateness decision
2. The review must use paper to be effective
3. A signature automatically proves least privilege regardless of available information
4. Privilege review can be replaced by counting passwords