A security professional must deactivate user accounts when employees leave the company to remove access to sensitive information and resources. Which domain does this scenario describe?

$1$ point

Security assessment and testing

Security and risk management

Communication and network security

Identity and access management