The official management decision given by a senior organizational official to authorize operation of an information system and to explicitly accept the risk to organizational operations (including mission, functions, image, or reputation), organizational assets, individuals, other organizations, and the Nation based on the implementation of an agreed-upon set of security controls.
Response:

What is the 2nd SDLC phase; which maps to the RMF steps 3 & 4 (Implement, Assess)?
Response:

Which of the following techniques are used after a security breach and are intended to limit the extent of any damage caused by the incident?
Response:

Who has primary responsibility to develop a report of the results of the security and privacy control assessments, including recommendations for correcting deficiencies in the implemented controls? Response:

The security control type for an information system that primarily are implemented and executed by people (as opposed to systems).
Response: