$3$ points

One of the specific management activities and outcomes $($framework core sub$-$category$)$ within the NIST Cybersecurity Framework is "Identities and credentials are issued, managed, verified, revoked, and audited for authorized devices, users and processes". Which Framework core Category incorporates this sub$-$category?

Identity Management and Access Control $($

PR$.$AC$)$

Business Environment $($

ID$.$BE$)$

Asset Management $($

ID$.$AM$)$

Security Continuous Monitoring $($

DE$.$CM$)$