Match each cybersecurity strategy component with its purpose.

### Why this is right Each component addresses a different part of security planning: understanding risk, limiting privileges, protecting data, or evaluating external relationships. ### The pairs | Item | Matches | Why | |---|---|---| | Risk assessment | Identify threats, vulnerabilities, and their possible organizational impacts | It helps the organization understand what could happen and how harmful it may be. | | Access controls | Limit access according to roles and minimum necessary privileges | Role-based access and least access reduce unnecessary exposure of sensitive information. | | Data encryption | Protect sensitive data from unauthorized access | Encryption makes data less readable to parties who should not access it. | | Third-party risk management | Assess vendors' and partners' cybersecurity posture | External organizations can create risk, so their security practices need assessment. | ### Terms - **Privilege**: Permission to access information or perform an action. - **Encryption**: A method of protecting data by transforming it so unauthorized parties cannot readily read it. ### Remember Match each component to the risk or control it directly addresses.