Which of the following tasks are part of the security and risk management domain? Select all that apply.