The Phase 0 of Risk Management Framework (RMF) Is Known

question 196

Multiple Choice

The phase 0 of Risk Management Framework (RMF) is known as strategic risk assessment planning. Which of the following processes take place in phase 0? Each correct answer represents a complete solution. Choose all that apply.

• A) Review documentation and technical data.
• B) Apply classification criteria to rank data assets and related IT resources.
• C) Establish criteria that will be used to classify and rank data assets.
• D) Identify threats, vulnerabilities, and controls that will be evaluated.
• E) Establish criteria that will be used to evaluate threats, vulnerabilities, and controls.