A security administrator established a hardened secure baseline for all corporate workstations six months ago. During a recent audit, several workstations were found with disabled host firewalls and modified registry settings that deviate from the approved image. Which phase of secure baseline management should the administrator strengthen to prevent this ongoing configuration drift?