Which of the following are the phases of the Certification and Accreditation (C&A) process? Each correct answer represents a complete solution. Choose two.

Continuous Monitoring is a critical phase in modern C&A (now RMF) processes, involving ongoing assessment and monitoring of security controls to maintain an acceptable security posture and react to changes.

Auditing is an activity that occurs within different phases of C&A/RMF (e.g., during assessment or continuous monitoring), but it is not a standalone phase of the C&A process itself.

Detection is a function of security controls (e.g., IDS/IPS) to identify security events, not a distinct phase of the C&A process.

Initiation is the first phase of the C&A process where the system is defined, its boundaries are established, and the necessary resources for the C&A effort are allocated.