Match each component of an organisation's cybersecurity strategy document with its primary purpose: Components: 1. Introduction 2. Cybersecurity environment 3. Previous-year update 4. Risk appetite Purposes: A. Defines the extent and types of risk the organisation is prepared to tolerate or pursue B. Establishes the core mission context, overall rationale, and intended high-level outcomes C. Synthesises current external threat conditions, internal vulnerabilities, and relevant contextual evidence D. Evaluates achievements, unresolved gaps, and notable security incidents from the preceding period

### The pairs | Item | Matches | Why | |---|---|---| | Introduction | Sets out purpose, mission context, and high-level outcomes | It explains why the strategy exists and the broad results it seeks. | | Cybersecurity environment | Summarises relevant threats and evidence about the current context | It helps readers understand the threat conditions relevant to the organisation. | | Previous-year update | Reviews progress, gaps, and incidents from the prior period | It records what changed and what remains to improve. | | Risk appetite | States the level and kinds of risk the organisation is willing to accept | It gives decision-makers a reference for balancing risk and opportunity. | ### Terms - **Cybersecurity environment**: the current threats and conditions that affect an organisation’s cyber risk. ### Remember Each strategy section has a distinct job: context, progress, or direction.