Which of the following tasks may be part of the identity and access management domain?
a. Managing and controlling physical and logical assets
b. Setting up an employee's access keycard
c. Conducting security control testing
d. Ensuring users follow established policies
