What does the Planning and Risk Assessment domain of the Security Maintenance Model primarily focus on$?$

Group of answer choices

Documenting and remediating vulnerabilities

Conducting penetration tests

Monitoring IT activity in real$-$time

Identifying and planning ongoing information security activities