CGRC · Question #503
The RMF Step and task where the Information System (include system boundary) is described and documented in the Security Plan Response:
The correct answer is C. RMF Step 1, Task 2. The RMF Step and task where the Information System, including its boundary, is described and documented in the Security Plan is RMF Step 1, Task 2.
Question
The RMF Step and task where the Information System (include system boundary) is described and documented in the Security Plan Response:
Options
- ARMF Step 1, Task 1
- BRMF Step 1, Task 3
- CRMF Step 1, Task 2
- DRMF Step 1, Task 4
How the community answered
(53 responses)- A4% (2)
- B6% (3)
- C89% (47)
- D2% (1)
Why each option
The RMF Step and task where the Information System, including its boundary, is described and documented in the Security Plan is RMF Step 1, Task 2.
RMF Step 1, Task 1 typically involves identifying the Authorizing Official and key stakeholders.
RMF Step 1, Task 3 focuses on identifying and documenting common controls and their providers.
According to NIST RMF, Step 1 (Prepare) includes Task 2, which specifically mandates describing the information system, defining its boundary, and documenting this information in the security plan. This task establishes the foundational scope for all subsequent RMF activities.
RMF Step 1, Task 4 generally involves identifying and documenting organizational roles related to the RMF process.
Concept tested: RMF Step 1 - System Description Task
Source: https://csrc.nist.gov/publications/detail/sp/800-37/rev-2/final
Topics
Community Discussion
No community discussion yet for this question.