- Home
- All questions
- Question 13
CompTIA Security+ study material · question 13 of 611
Which RMF step determines which control baseline the system will start from?
Show the answer
Answer: C. Categorize
Categorize sets the impact level of the system and its information, and that level drives baseline selection in the next step.
Source: NIST SP 800-37 Rev. 2 (NIST) — SP 800-37 Rev. 2 § 3.2 Categorize