The user who handles security assessments, manages password policies, and reviews audit logs, should be handled by whom?

Domain 7: Security Operations Practice Questions 
Questions relating to the following topics are included in this domain: 
Understanding and complying with investigations
Proper logging and monitoring activities
Performing configuration management 
Applying fundamental security concepts
Conducting resource protection and incident management