Frameworks, Policies, Procedures, Lifecycles Flashcards
(7 cards)
The identification of Key roles, risk strategy, risk assessment and control baselines occurs is called and occurs at what level of the RMF
Prepare, first step
The identification of system and information criticality, sensitivity, and ownership occurs at what level of the RMF. What is the name of the level
Categorization, step 2
The selection of controls occurs at what level of RMF, what level does their implementation occur at?
Selection 3, implmentation 4
what level of the RMF does Assessment and authorization occur
5, 6
What is the final level of RMF
Monitor7
What is an ATO
Authorization to Operate,
Formal auth from an authority to allow the operation of a product/syste and accespts the risk of operation.
Purpose: Ensure systesm meet sec requirements prior to their deployment.