Which of the following sections come under the ISO/IEC 27002 standard?

Which of the following sections come under the ISO/IEC 27002 standard?

A.
Financial assessment

B.
Asset management

C.
Security policy

D.
Risk assessment