Answer:
banks must have an information security policy
physical_ made up of the features that are not created by human beings.
cultural environment _ the behaviors, norms, and values that people use to understand.