Which of the following is the BEST control to minimize the risk associated with loss of information as a result of ransomware exploiting a zero-day vulnerability?

A. A security operation center
B. A patch management process
C. A public key infrastructure
D. A data recovery process