Which domain involves conducting investigations and implementing preventive measures?

a. Security operations
b. Security and risk management
c. Asset security
d. Identity and access management