According to the MITRE ATT&CK framework, which approach should be used to mitigate exploitation risks?

According to the MITRE ATT&CK framework and the SCAZT documentation, one of the most effective mitigation techniques against exploitation is to keep systems updated with the latest patches. Exploitation typically targets known vulnerabilities in operating systems and applications. Timely patching significantly reduces the risk of successful exploitation, especially zero-day vulnerabilities once disclosed.