Determining the level of business impact for a critical asset is based on several factors; the primary internal factors include: $($Select ALL correct answers.$)$

Question $11$ options:

Type of asset

Asset vulnerabilities

Existing control measures

Threat agent's capabilities

Threat agent's TTPs

Threat likelihood of occurrence

Business value of asset