A. Implementing host-based Data Loss Prevention (DLP) tools to monitor outgoing files

B. Enforcing strict controls on the use of removable media and USB devices

C. Conducting real-time monitoring of privileged user activity and access logs

D. Mandating complex password changes every 90 days