The BEST way to secure the most vulnerable attack vector for a network is to:
A.
Update all antivirus definitions on workstations and servers.
B.
Use biometrics and SSO for authentication.
C.
Remove unneeded services running on the servers.
D.
Provide end-user awareness training to office staff.