Which domain involves keeping data secure by ensuring users follow established policies to control and manage physical assets?
a. Communication and network security
b. Identity and access management
c. Security and risk management
d. Security assessment and testing
