Your firm has been hired to help map a client’s control acti…

Your firm has been hired to help map a client’s control activities to the appropriate National Institute of Standards and Technology (NIST) Control Family in the NIST Special Publication (SP) 800-53 document.  Specifically, the client’s control is that the IT Department periodically scans the network and related software systems for vulnerabilities.  This control best matches the description of which of the following NIST SP 800-53 Control Families?