In order for data security systems to be effective, there must be a proper balance between what an individual is expected to divulge and another factor. What is this second factor?

Question $57$ options:

$1)$

what information employment and management decisions require

$2)$

what the security system costs and the known or projected benefits

$3)$

what level of technology acceptance and user satisfaction is expected

$4)$

what the size of the organization is relative to its external environment