Review the frameworks discussed in $2\mathrm{.}2$ Cybersecurity Frameworks of your UCertify course reading from Cybersecurity and Third$-$Party Risk.

How would you recommend organizations determine which frameworks meets their needs as a framework to guide their cyber security program?

How do you think organizations can prioritize which controls they provide resources to versus which ones they must accept the risk without controls $($or minimal controls$)?$

Provide recommendations on how to discuss this prioritization method with executive leadership.