Whether and how much to protect an information asset is determined using

Question $11$ options:

$1)$

estimates by security staff.

$2)$

the location of the asset.

$3)$

cost$-$benefit analysis.

$4)$

corporate policy.