Which of the following recommendation would MOST likely reduce the risk of unauthorized access?

A company is repeatedly being breached by hackers who valid credentials. The company’s Chief information Security Officer (CISO) has installed multiple controls for authenticating users, including biometric and token-based factors. Each successive control has increased overhead and complexity but has failed to stop further breaches. An external consultant is evaluating the process currently in place to support the authentication controls .

Which of the following recommendation would MOST likely reduce the risk of unauthorized access?
A . Implement strict three-factor authentication.
B . Implement least privilege policies
C . Switch to one-time or all user authorizations.
D . Strengthen identify-proofing procedures

Answer: A