Which of the following is being described when a security professional develops and publishes a password policy specifically tailored to a company, and enforces the policy through technical means?
1. Applying vendor-specific configurations.
2. Developing regulatory frameworks
3. Implementing security control diversity.
4. Creating security benchmarks.