What is a foundational model that informs how organizations consider risk when setting up systems and security policies?

$1$ point

Confidentiality, integrity, and availability $($CIA$)$ triad

Sensitive personally identifiable information $($SPII$)$

General Data Protection Regulation law $($GDPR$)$

Cybersecurity Framework $($CSF$)$

$4.$

Question $4$