Which domain involves conducting, collecting, and analyzing data, as well as conducting security audits to monitor for risks, threats, and vulnerabilities?

Security and risk management

Identity and access management

Communication and network security

Security assessment and testing