According to the identify $($ID$)$ function of the NIST Cybersecurity Framework, what allows an organization to prioritize its efforts where cybersecurity risk is involved?

Multiple Choice

$31$:$38$:$11$

knowledge of current hacker events

installation of appropriate security software

understanding of its business environment and resources

observation of data usage across the organization