The phase 3 of the Risk Management Framework (RMF) process is known as mitigation planning. Which of the following processes take place in phase 3? Each correct answer represents a complete…

The correct answer is B. Document and implement a mitigation plan. C. Agree on a strategy to mitigate risks. D. Evaluate mitigation progress and plan next assessment. The RMF process is divided into distinct phases. Phase 1 focuses on identifying threats, vulnerabilities, and controls to be evaluated (Choice A). Phase 3 - Mitigation Planning - encompasses: documenting and implementing a mitigation plan (B), agreeing on a strategy to mitigate…

Security and Privacy Governance, Risk Management, and Compliance Program

Question

The phase 3 of the Risk Management Framework (RMF) process is known as mitigation planning. Which of the following processes take place in phase 3? Each correct answer represents a complete solution. Choose all that apply.

Options

AIdentify threats, vulnerabilities, and controls that will be evaluated.
BDocument and implement a mitigation plan.
CAgree on a strategy to mitigate risks.
DEvaluate mitigation progress and plan next assessment.

How the community answered

(52 responses)

A
8% (4)
B
92% (48)

Explanation

The RMF process is divided into distinct phases. Phase 1 focuses on identifying threats, vulnerabilities, and controls to be evaluated (Choice A). Phase 3 - Mitigation Planning - encompasses: documenting and implementing a mitigation plan (B), agreeing on a strategy to mitigate identified risks (C), and evaluating mitigation progress and planning the next assessment (D). Choice A belongs to an earlier phase (identification/assessment), not the mitigation planning phase.

Topics

#Risk Management Framework (RMF)#Mitigation Planning#Risk Mitigation#RMF Process Activities

Community Discussion

No community discussion yet for this question.

Full CAP Practice