Select ALL factors the course material identifies as relevant when choosing cybersecurity requirements: industry, legal or contractual obligations, available resources, and business objectives.

### Why this is right - **Industry** matters because sectors face different risks and requirements. - **Legal or contractual obligations** determine which external requirements apply. - **Available resources** affect whether implementation can be sustained. - **Business objectives** help ensure security choices support organizational needs. ### The concept Framework and standard selection depends on context rather than a universal ranking. Organizations should also consider size, locations, technology maturity, risk tolerance, critical assets, threats, budget, and staffing. These factors help determine which requirements are applicable and which can be implemented effectively. ### The other options There are no incorrect options in this question. All four listed factors are relevant to selection. ### Terms - **Contractual obligation**: A requirement an organization has agreed to meet under a contract. - **Technology maturity**: The extent to which technology practices and capabilities are developed and managed. ### Remember Check both what the organization must do and what it can sustain.