Why might a hospital require a different framework emphasis from an online retailer? Use the selection factors in the course material.

### What a good answer covers - Compare the organizations' **industry sectors** and operating contexts. - Identify their different **critical assets**, such as patient information versus customer or payment-related information. - Consider applicable requirements, including the material's healthcare examples and the Payment Card Industry Data Security Standard for payment card processing. - Compare likely threats, business objectives, security maturity, and available resources. - Conclude that framework selection should follow the identified context rather than a universal rule. ### The concept The material asks this comparison because organizations protect different assets and face different obligations and threats. A hospital may need to account for patient records and healthcare rules. An online retailer processing payment cards may need to account for payment-card requirements and customer information. These are examples of differing emphasis, not a claim that either organization has only one risk. A sound selection considers all relevant factors before choosing. ### Terms - **Payment Card Industry Data Security Standard (PCI DSS)**: A security standard identified in the material for payment card processing. - **Critical asset**: Information or another resource the organization must protect. ### Remember Different assets and obligations lead to different framework emphasis.