A financial institution has several that currently employ the following controls:
1. The severs follow a monthly patching cycle.
2. All changes must go through a change management process.
3. Developers and systems administrators must log into a jumpbox to access the servers hosting the data using two-factor authentication.
4. The servers are on an isolated VLAN and cannot be directly accessed from the internal production network.
An outage recently occurred and lasted several days due to an upgrade that circumvented the approval process. Once the security team discovered an unauthorized patch was installed, they were able to
resume operations within an hour.
Which of the following should the security administrator recommend to reduce the time to resolution if a similar incident occurs in the future?