A recent audit of the vulnerability management program outlined the finding for increased awareness of secure coding practices. Which of the following would be best to address the finding?

Establishing regular, targeted training for developers on secure coding practices, especially focusing on common vulnerabilities, directly addresses the finding of increased awareness. This proactive approach integrates security early into the Software Development Life Cycle (SDLC), reducing the introduction of new vulnerabilities.

A yearly inspection of code repositories provides a reactive snapshot of code quality but does not directly increase awareness or educate developers on secure coding practices themselves.

An external penetration test of the network primarily focuses on network-level vulnerabilities and external attack surfaces, not specifically on secure coding practices or developer awareness within the SDLC.

Deploying more vulnerability scanners increases detection capabilities for existing vulnerabilities but does not proactively prevent their introduction or improve developers' secure coding knowledge.