In setting priorities for remediation or mitigation actions, you should consider which of the following factors? $($Select ALL correct answers.$)$

Question $15$ options:

whether a vulnerability exposure is internal or external

what is the risk severity $($based on business value of assets$)$

using root cause analysis to find originating threat actor

how to quantify business impacts, such as how long will they be offline

what is the remaining budget for recovery efforts