Various network outages have occurred recently due to unapproved changes to network and
security devices. All changes were made using various system credentials. The security analyst
has been tasked to update the security policy. Which of the following risk mitigation strategies
would also need to be implemented to reduce the number of network outages due to unauthorized
changes?

A.
User rights and permissions review

B.
Configuration management

C.
Incident management

D.
Implement security controls on Layer 3 devices

Explanation: