What is Step 6? Response:

The correct answer is A. Monitor. Step 6 of the NIST Risk Management Framework (RMF) is Monitor, involving continuous oversight of security controls and risk.

Compliance Maintenance

Question

Options

AMonitor
BSelect Controls
CSystem Boundary
DAuthorize

How the community answered

(39 responses)

A
92% (36)
B
3% (1)
C
5% (2)

Why each option

Step 6 of the NIST Risk Management Framework (RMF) is Monitor, involving continuous oversight of security controls and risk.

AMonitorCorrect

According to NIST SP 800-37, the sixth and final step of the Risk Management Framework (RMF) is Monitor. This step involves continuously monitoring security controls, documenting changes, performing impact analyses, and reporting the security posture of the information system.

BSelect Controls

Select Controls is Step 2 of the RMF, occurring after system categorization.

CSystem Boundary

System Boundary is part of Step 1 (Categorize), not a separate step in the RMF.

DAuthorize

Authorize is Step 5 of the RMF, which is the official decision to operate the information system after assessing controls.

Concept tested: NIST RMF steps - Monitor

Source: https://csrc.nist.gov/projects/risk-management/about-rmf

Topics

#NIST RMF Steps#Monitoring#Continuous Monitoring#NIST SP 800-37 Rev 1

Community Discussion

No community discussion yet for this question.

Full CGRC Practice