Arrange the following cybersecurity framework-selection activities in the correct logical order, from first to last: 1. Shortlist candidate frameworks that satisfy the identified obligations 2. Formally approve the preferred framework for organizational adoption 3. Identify business objectives, industry regulations, and legal obligations 4. Compare shortlisted frameworks against organizational resources and capabilities

### The order 1. **Describe the organization, its business objectives, and its applicable requirements.** Selection needs a clear profile and awareness of relevant obligations. 2. **Identify critical assets and likely threats.** This clarifies what requires protection and the risks that matter. 3. **Assess current security maturity and available resources.** The organization needs to understand its ability to support implementation. 4. **Select a framework suited to the organization's context.** A choice is better grounded after context, risks, and capacity are understood. ### The concept This is a practical reasoning sequence based on the course's selection factors. The material does not prescribe a formal four-step method, but it does say that profile, requirements, objectives, assets, threats, maturity, and resources inform the decision. The sequence ensures the framework is connected to actual organizational needs rather than chosen in isolation. ### Terms - **Security maturity**: The development or formality of an organization's security practices. - **Applicable requirement**: A legal, regulatory, or organizational obligation relevant to the organization. ### Remember Understand context and capacity before committing to a framework.