nerdexam
(ISC)2

CGRC · Question #503

The RMF Step and task where the Information System (include system boundary) is described and documented in the Security Plan Response:

The correct answer is C. RMF Step 1, Task 2. The RMF Step and task where the Information System, including its boundary, is described and documented in the Security Plan is RMF Step 1, Task 2.

Scope of the System

Question

The RMF Step and task where the Information System (include system boundary) is described and documented in the Security Plan Response:

Options

  • ARMF Step 1, Task 1
  • BRMF Step 1, Task 3
  • CRMF Step 1, Task 2
  • DRMF Step 1, Task 4

How the community answered

(53 responses)
  • A
    4% (2)
  • B
    6% (3)
  • C
    89% (47)
  • D
    2% (1)

Why each option

The RMF Step and task where the Information System, including its boundary, is described and documented in the Security Plan is RMF Step 1, Task 2.

ARMF Step 1, Task 1

RMF Step 1, Task 1 typically involves identifying the Authorizing Official and key stakeholders.

BRMF Step 1, Task 3

RMF Step 1, Task 3 focuses on identifying and documenting common controls and their providers.

CRMF Step 1, Task 2Correct

According to NIST RMF, Step 1 (Prepare) includes Task 2, which specifically mandates describing the information system, defining its boundary, and documenting this information in the security plan. This task establishes the foundational scope for all subsequent RMF activities.

DRMF Step 1, Task 4

RMF Step 1, Task 4 generally involves identifying and documenting organizational roles related to the RMF process.

Concept tested: RMF Step 1 - System Description Task

Source: https://csrc.nist.gov/publications/detail/sp/800-37/rev-2/final

Topics

#RMF Prepare Step#System Scope#Security Plan#NIST SP 800-37

Community Discussion

No community discussion yet for this question.

Full CGRC Practice