An administrator needs to implement a security patch policy on the network that adheres to an internal SLA. Which of the following actions BEST achieves this task?

Defining a test server group and successfully installing patches there before scheduling installation on production servers minimizes the risk of introducing issues that could violate an SLA by disrupting critical services. This phased approach ensures stability and adherence to service level agreements.

Scheduling installation on production servers before successfully installing patches on a test group bypasses crucial validation, risking production outages or issues that could violate SLAs.

Installing patches only during non-working hours without prior testing on a test group still carries the risk of unforeseen issues in production systems, potentially violating an SLA.

Sending an email to users for patch scheduling is inefficient and does not address the technical validation or risk management required to meet an internal SLA for security patches.