One of the specific management activities and outcomes $($framework core sub$-$category$)$ within the NIST Cybersecurity Framework is "Privileged users understand their roles and responsibilities". Which Framework core Category incorporates this sub$-$category?

Awareness and Training $($

PR$.$AT$)$

Security Continuous Monitoring $($

DE$.$CM$)$

Business Environment $($

ID$.$BE$)$

Identity Management and Access Control $($

PR$.$AC$)$