According to the MITRE ATT&CK framework and the SCAZT documentation, one of the most effective mitigation techniques against exploitation is to keep systems updated with the latest patches. Exploitation typically targets known vulnerabilities in operating systems and applications. Timely patching significantly reduces the risk of successful exploitation, especially zero-day vulnerabilities once disclosed.
Reference: Designing and Implementing Secure Cloud Access for Users and Endpoints (SCAZT), Section 6:
Threat Response, Pages 108-110; MITRE ATT&CK Enterprise Mitigation ID M1051 - Update Software.