Developers currently have access to update production servers without going through an approval process. Which of the following strategies would BEST mitigate this risk?

Incident management is a reactive process for responding to security events after they occur, not a preventive control over production access.

A clean desk policy governs the physical handling of sensitive documents and is unrelated to software deployment access controls.

Routine audits detect unauthorized changes after the fact but do not prevent developers from making unapproved modifications in the first place.

Change management is a formal process requiring documented requests, impact assessments, and approvals before any changes are applied to production systems. Implementing it removes ad hoc developer access and ensures all modifications are reviewed and authorized by the appropriate stakeholders.