FISMA and OMB policy require external providers handling federal information or operating information systems on behalf of the federal government to meet the same security requirements as federal agencies. Organizations can require external providers to implement all steps in the Risk Management Framework with the exception of which RMF step?

🎲 Try a Random Question  |  Total Questions in Quiz: 124  |  🧠 Study this quiz with Flashcards
This question is part of a full practice quiz:
Certified Authorization Professional (CAP) — practice the complete quiz, review flashcards, or try a random question.


1. FISMA and OMB policy require external providers handling federal information or operating information systems on behalf of the federal government to meet the same security requirements as federal agencies. Organizations can require external providers to implement all steps in the Risk Management Framework with the exception of which RMF step?