An industrial controller cannot be patched immediately without halting a safety-critical process. Which approach best balances security and operational needs?

1. Allow unrestricted vendor internet access until shutdown
2. Declare the controller outside the security program
3. Apply every available update immediately without validation
4. Use assessed compensating controls and a controlled maintenance plan