In secure software design and development, what is meant by sources of security requirements?

A. only screen size B. only coffee breaks C. laws, standards, threat models, business needs and stakeholder expectations D. only developer mood