Which practices does the course material identify as useful for cybersecurity compliance across relevant sectors? Select ALL that apply.

### Why this is right - **Encryption** helps protect data from being read by unauthorized parties. - **Access controls** limit who can use information or systems. - **Employee training** helps staff understand security expectations and risks. - **Incident response planning** prepares an organization to coordinate action when an event occurs. ### The concept The material gives these practices across its sector examples. They are not a single universal checklist that automatically satisfies every law or standard. Organizations must select and implement controls according to applicable requirements and their own risks. Other examples in the material include audits, vulnerability scans, monitoring, and security testing. ### The other options There are no incorrect options in this question. Each practice is identified as useful in the material. ### Terms - **Encryption**: Transforming data so it cannot readily be read without an appropriate key. - **Access control**: A measure that governs who may use information or systems. - **Incident response plan**: A documented approach for coordinating actions during a security incident. ### Remember Common controls recur across sectors, but applicability and implementation depend on the specific requirement.