What is the most effective preventive control to enforce system administrator controls to manage the risks of operating system configurations that could result in breaches?
1) Regularly updating and patching the operating system
2) Implementing strong password policies
3) Enforcing multi-factor authentication
4) Implementing intrusion detection and prevention systems