The RMF Step and task where a Continuous Monitoring strategy that monitors the effectiveness of the selected security controls is created. Response:

In the NIST Risk Management Framework (RMF), Step 2 is "Select Security Controls", and Task 3 within this step specifically involves developing and documenting the continuous monitoring strategy. This strategy outlines how the effectiveness of the selected security controls will be continuously monitored to ensure ongoing security and compliance.

RMF Step 2, Task 1 is about "Identify common controls and system-specific controls", which precedes strategy development.

RMF Step 1, Task 3 is about "Define authorization boundary", which is part of preparing the system for the RMF process, not developing a continuous monitoring strategy.

RMF Step 2, Task 2 is about "Tailor controls from the control baseline", which involves customizing controls, not creating the monitoring strategy itself.