The most effective preventive control to enforce system administrator controls to manage the risks of operating system configurations that could result in breaches would be ______.