A 62-year-old man with hypertension and type 2 diabetes has no clinical atherosclerotic cardiovascular disease. His non-fasting lipids show total cholesterol 6.0 mmol/L, LDL-C 3.8 mmol/L, HDL-C 0.9 mmol/L and triglycerides 2.1 mmol/L. His calculated 10-year cardiovascular risk is 23%. According to Canadian Cardiovascular Society dyslipidaemia guidelines, which lipid-lowering strategy is most appropriate?