Select one word from the box for the question.

Business obligation, Regulatory obligation, Customer obligation, Employee obligation

There are $3$ types of security obligations you need to consider for information security requirements. When the university needs to keep students' data or staff files secure$,$ but accessible whenever needed.