A risk practitioner has observed that there is an increasing trend of users sending sensitive information by email without using encryption. Which of the following would be the MOST effective approach to mitigate the risk associated with data loss?

Implement a tool to create and distributive violation reports 

Block unencrypted outgoing emails which contain sensitive data 

Implement a progressive disciplinary process for email violations 

Raise awareness of encryption requirements for sensitive data