Developers repeatedly introduce the same authorization flaw. Which response best addresses the systemic cause?

1. Remove all findings from developer reports
2. Purchase unrelated network equipment
3. Fix only the latest instance and close the program issue
4. Improve secure design patterns, developer guidance, and automated checks for that flaw