A corporation managing critical infrastructure needs to safeguard its operational technology environment. Among the following choices, which measure would most effectively enhance the defense of their control systems?
Disable all unnecessary services and ports on the devices managing the industrial processes.
Encrypt all stored data pertaining to operational procedures and configurations.
Implement network segmentation to isolate the control systems from other less secure networks.
Institute a strict schedule for applying updates to the control system software during operational hours.