The number of tickets the help desk has been receiving has increased recently due to numerous false-positive phishing reports. Which of the following would be best to help to reduce the false positives?

Improving security awareness training is the best option because it directly addresses the root cause of false-positive phishing reports. When users are better trained to identify actual phishing attempts, they are less likely to report legitimate emails as suspicious. This reduces the number of unnecessary tickets for the help desk. Performing more phishing simulation campaigns might help identify vulnerable users but doesn't inherently reduce false positives if awareness isn't improved. Hiring more help desk staff only addresses the symptom (high ticket volume) and not the underlying problem. Implementing an incident reporting web page might streamline reporting but won't reduce the number of incorrect reports.