Which of the following phases of NIST SP 800-37 C&A methodology will define the above task

Della works as a security engineer for BlueWell Inc. She wants to establish configuration
management and control procedures that will document proposed or actual changes to the
information system. Which of the following phases of NIST SP 800-37 C&A methodology will
define the above task

A.
Security Certification

B.
Security Accreditation

C.
Initiation

D.
Continuous Monitoring