List three factors that should be considered when developing a security plan

What will be an ideal response?

(a)
Sensitivity
of
information,
value
of
resources
(scope
and
purpose).
(b)
Degree
of
management
commitment
to
plan.
(c)
Degree
of
user
understanding
and
acceptance
of
need
for
security
plan.