A compliance matrix lists requirements but has no owner or evidence for several critical items. What should the manager establish?

1. Automatic closure because the matrix exists
2. A generic statement that compliance is everyone's job
3. Accountability, verification evidence, and tracked resolution for each gap
4. A larger number of requirement rows