Which of the following is NOT likely to be a part of the overall targeting guidance?

Group of answer choices

Choose targets known to have good security systems and personnel.

Choose multiple targets that have more than $10$K customers.

Choose multiple targets that use similar ICS configurations.

Choose multiple targets that do not use MFA $($two factor authentication$)$ on remote access VPNs$.$

Choose targets likely to be unable to repair damage quickly.