The suggested answer is B.
The Continual Process Improvement Management process is involved with many kinds of process design and with implementation and improvement to the IT infrastructure and service processes. Continual Process Improvement Management aims to build standardized processes for the handling of IT-related services and infrastructure, and to document, operate, control, and improve them permanently.
Answer option A is incorrect. Risk management is a continuous process. The process from the threats to risks and then finally to security measures is known as risk management. In this process, the risks are first identified, then examined, and then finally reduced to an acceptable level. The process is applied to all aspects of the operational processes.
Answer option D is incorrect. Configuration management (CM) is a field of management that focuses on establishing and maintaining consistency of a system's or product's performance and its functional and physical attributes with its requirements, design, and operational information throughout its life. For information assurance, CM can be defined as the management of security features and assurances through control of changes made to hardware, software, firmware, documentation, test, test fixtures, and test documentation throughout the life cycle of an information system.
CM for information assurance, sometimes referred to a Secure Configuration Management (SCM), relies upon performance, functional, and physical attributes of IT platforms and products and their environments to determine the appropriate security features and assurances that are used to measure a system configuration state. For example, configuration requirements may be different for a network firewall that functions as part of an organization's Internet boundary versus one that functions as an internal local network firewall.
Answer option C is incorrect. The change management is a structured approach to transitioning individuals, teams, and organizations from a current state to a desired future state. It is an organizational process aimed at empowering the employees to accept and embrace changes in their current business environment. In project management, change management refers to a project management process where changes to a project are formally introduced and approved.
Reference: "Project Management Body of Knowledge (PMBOK Guide), Fourth edition"
Chapter: Quality and Risk Management
Objective: Continual Process Improvement