Which domain involves keeping data secure by ensuring users follow established policies to control and manage physical assets?
a. Identity and access management
b. Communication and network security
c. Security assessment and testing
d. Security and risk management