Conduct a risk assessment, which measures possible negative impacts. Compare with the five assurance levels and decide which one suits this case. Select technology according to the technical guidance issued by NIST.