Which of the following processes has the goal to ensure that any change does not lead to reduced or compromised security?

Which of the following processes has the goal to ensure that any change does not lead to
reduced or compromised security?

A.
Security management

B.
Configuration management

C.
Change control management

D.
Risk management