Which three things must be considered for the design, planning, and implementation of access control mechanisms? (Choose three)

Exposures refer to being open to harm or damage, which is a consequence rather than a direct consideration like risks, vulnerabilities, or threats in the planning stage.

Objectives relate to the goals or aims of the access control system itself, rather than the intrinsic factors (risks, vulnerabilities, threats) that necessitate its design.

Risks represent the potential for loss or damage resulting from a threat exploiting a vulnerability and are a primary consideration for determining appropriate access controls.

Vulnerabilities are weaknesses in a system or design that can be exploited by threats, and identifying them is essential to mitigate potential unauthorized access.

Threats are potential causes of an unwanted incident that may result in harm to a system or organization, directly influencing the need for robust access control mechanisms.