Addressing which PCI DSS requirement keeps malicious hackers out of our systems?

Maintain an information security policy

Build and maintain a secure network and system

$$ Implement strong access controls

$$ Maintain a vulnerability management program