A company has experienced negative publicity associated with users giving out their credentials accidentally or sharing intellectual secrets that were not property defined. The company recently implemented some new policies and is now testing their effectiveness. Over the last three months, the number of phishing victims dropped from 100 to only two in the last test The DLP solution that was implemented catches potential material leaks, and the user responsible is retrained. Personal email accounts and USB drives are restricted from the corporate network. Given the improvements which of the following would a security engineer identify as being needed in a gap analysis?

1. Additional corporate wide training on phishing

2. A policy outlining what is and is not acceptable on social media

3. Notifications when a user falls victim to a phishing attack

4. Positive DLP preventions with stronger enforcement