CompTIA SecurityX (CAS-005) CAS-005 — Question 320

A security architect is performing threat-modeling activities related to an acquired overseas software company that will be integrated with existing products and systems. Once its software is integrated, the software company will process customer data for the acquiring company. Given the following: Which of the following mitigations would reduce the risk of the most significant threats?