During a routine security audit, Andrew's team discovers a known vulnerability in the software that could potentially allow unauthorized access to this sensitive data. Concerned about the potential risks posed by this vulnerability, he decides to take action to mitigate it$.$ What is the best course of action for Andrew to mitigate the risk posed by the discovered vulnerability?

Please select a single option below

Increasing the company's network bandwidth to handle potential attacks resulting from the vulnerability.

Implementing security patches or updates provided by the software vendor to address the known vulnerability.

Changing all user passwords immediately to prevent unauthorized access to sensitive data.

Ignoring the vulnerability since there haven't been any reported incidents of exploitation yet.