Which enterprise security architecture framework is used to capture business requirements and determine the necessary security to meet those requirements?

Select an answer:

ISO$/$IEC $27001$

SABSA $($Sherwood Applied Business Security Architecture$)$

COBIT $($Control Objectives for Information and Related Technologies$)$

NIST Cybersecurity Framework