Which is the proper sequence of steps in the security life cycle?

Assess threats and select risk response, develop and communicate policy,

acquire and implement solutions, monitor performance

Assess threats and select risk response, acquire and implement solutions,

monitor performance, develop and communicate policy

Develop and communicate policy, monitor performance, assess threats and

select risk response, acquire and implement solutions

Assess threats and select risk response, monitor performance, develop and

communicate policy, acquire and implement solutions