The phase 3 of the Risk Management Framework (RMF) process is known as mitigation planning.
Which of the following processes take place in phase 3 Each correct answer represents a
complete solution. Choose all that apply.
A.
Agree on a strategy to mitigate risks.
B.
Evaluate mitigation progress and plan next assessment.
C.
Identify threats, vulnerabilities, and controls that will be evaluated.
D.
Document and implement a mitigation plan.