University Research, a leading academic institution, is collaborating with multiple international research partners on a sensitive project involving genomic data. The project requires secure access to shared data and resources for researchers from different organizations and countries. The current IAM system lacks federated identity management capabilities and multi-factor authentication (MFA) for external users. The CISO is concerned about the potential for unauthorized access and data breaches. Which of the following IAM strategies is MOST critical for University Research to implement to ensure secure access to shared data and resources for external collaborators? a) Implement a role-based access control (RBAC) model with granular permissions for each user role, based on the principle of least privilege. b) Implement a federated identity management system that supports single sign-on (SSO) and MFA for external users, leveraging standards like SAML and OAuth. c) Implement a privileged access management (PAM) solution to control and monitor access to privileged accounts, with session recording and auditing. d) Implement a biometric authentication system for all users, including external collaborators, to enhance security and prevent unauthorized access.