Q23
Single choice
An organization ' s information security policies should be developed PRIMARILY on the basis of: