Management states that every privileged account was reviewed quarterly. Which evidence best supports testing that assertion?

1. The administrator's verbal assurance without corroboration
2. Dated review records reconciled to a complete privileged-account population
3. A screenshot showing only the review tool's logo
4. An unsigned procedure saying reviews should occur