An attacker distributes hostile content on Internet-accessible Web sites that exploit unpatched and improperly secured client software running on victim machines. Which of the SANS Critical Security Controls is primarily affected?