A hospital wants new internet-connected infusion pumps on the existing user VLAN to hit a ward opening date. The pumps cannot run endpoint agents and are patched quarterly. What should the network security manager require FIRST?
A. Dedicated network zone for the pumps with controlled ingress
B. Risk assessment of the pumps against clinical network requirements
C. Network intrusion detection covering the user VLAN
D. Vendor commitment to a faster patch cadence
(Explain your answer for more points in the comments!)