A.Clinger-Cohen Act

B.OMB Circular A-130, Appendix III, 1997

C.FISMA, 2002

D.OMB memorandum M-11-33, FY 2011

A.Only findings that have been evaluated as moderate or high

B.Only volatile findings that require prioritization in remediation

C.All failed controls identified throughout the RMF process

D.Deficiencies that have not yet been remediated and verified throughout the RMF process

A.The BRM provides a disorganized approach to classifying information system data and may be useful to the system owner in the security categorization process.

B.The BRM provides a structured approach to mix-up information system data and may be useful to the system owner in the security categorization process.

C.The BRM provides a structured approach to classifying information system data and may be useful to the system owner in the security categorization process.

D.The BRM provides a structured approach to mix-up information system data and may be useful to the system owner in the risky categorization process.

A.Phase 5

B.Phase 3

C.Phase 4

D.Phase 1

E.Phase 2

A.Early selection of assessors assess all implement security controls

B.Early selection of assessors voilates security requirements

C.Early selection of assessors complete security control assessments in a timely manner

D.Early selection of assessors support verification and validation activities that occur throughout the system life cycle