What describes the framework that enables to control user access to critical information in the heterogenous technology environments?

A vulnerability scanner identifies security weaknesses and misconfigurations in systems and applications, but it does not control user access.

Configuration management focuses on maintaining a consistent and desired state for IT systems and software, not directly on controlling user access to information.

Mobile Device Management (MDM) focuses on securing, monitoring, and managing mobile devices within an organization, but it is a subset of a broader access control strategy, not the overarching framework for controlling access to critical information for all users.

Identity and Access Management (IAM) is a framework of policies, processes, and technologies that enables organizations to manage digital identities and control user access to resources and critical information across various systems and applications in heterogeneous environments. IAM ensures that the right individuals have access to the right resources at the right times and for the right reasons.