Which of the following processes has the goal to ensure that any change does not lead to reduced or compromised security?

A. Change control management
B. Security management
C. Configuration management
D. Risk management