A large multinational corporation has recently experienced a significant data breach. The breach was detected by an external cybersecurity firm; and the corporation's IT department was unable to prevent or detect the breach in its early stages.

The CEO wants to ensure that such a breach does not happen again and is considering several options to enhance the company's security posture.

Which of the following options would be the MOST effective in preventing and detecting future data breaches?