Which of the following scenarios represents the BEST approach for applying a newly released patch to critical network infrastructure software?
Ignoring the patch until it has been available for several months to confirm it's stable
Applying the patch only to non-critical systems to observe its impacts before deciding on further action
Immediately applying it to all devices to ensure all security vulnerabilities are quickly mitigated
Testing the patch in a non-production environment prior to widespread deployment