Which of the following processes has the goal to ensure that any change does not lead to reduced or compromised security?

A. Risk management
B. Security management
C. Configuration management
D. Change control management