In a large enterprise, system administrators may release critical patches into production without testing. Which of the following would best mitigate the risk of interoperability issues?
a) Ensure that a reliable system rollback plan is in place.
b) Only allow updates to occur after hours.
c) Ensure that patches are approved by the chief information security officer.