When network management is outsourced to third parties, which of the following is the MOST effective method of protecting critical data assets?

Providing links to security policies is an administrative awareness measure that does not technically enforce or restrict third-party access to critical systems.

Logging all activities is a detective control that identifies incidents after they occur but does not prevent unauthorized access or data exfiltration in the first place.

Strong access controls-such as role-based access control (RBAC), least privilege, multi-factor authentication, and network segmentation-directly prevent unauthorized access to critical data assets by third parties. These controls enforce boundaries at the technical level, ensuring outsourced administrators can only reach systems and data necessary for their specific tasks. Unlike administrative or detective measures, access controls are proactive and preventive, making them the most effective protection method.

Confidentiality agreements are legal and contractual controls that create accountability but provide no technical enforcement mechanism to prevent a third party from accessing or misusing sensitive data.