Good network design is a security control. We implement controls to reduce risk $($which is a function of probability of harm and impact$).$ With that in mind, which of the following should be the primary guide to network security design?

Question $8$ options:

The level of Business Risk an organization is willing to tolerate

Annual revenue projections

Network speed requirements

The total number of endpoints and servers on the network