Which statement best describes the purpose of sources of security requirements?

A. only developer mood B. only screen size C. laws, standards, threat models, business needs and stakeholder expectations D. only coffee breaks