❓ Week 3 Knowledge Check – RMF & CSF Mastery

What is the correct order of RMF steps?

Select → Categorize → Implement → Authorize → Monitor → Assess

Categorize → Select → Implement → Assess → Authorize → Monitor

Identify → Protect → Detect → Respond → Recover

Select → Categorize → Monitor → Assess → Authorize → Implement

Who is responsible for signing the ATO?

Security Control Assessor

System Owner

ISSO

Authorizing Official (AO)

The CSF was created to replace the RMF in federal agencies.

True

False

What function of CSF focuses on identifying potential cybersecurity events?

Detect

Respond

Recover

Monitor

What is the purpose of the “Monitor” step in RMF?

This response will be reviewed and graded after submission.

Explain one scenario where the CSF is preferred over RMF.

This response will be reviewed and graded after submission.

Match the framework with its characteristic

Sort elements

Authorizing official approval required
Flexible and voluntary implementation
Risk-based and control-focused

RMF

CSF

Both

A security team has implemented controls and completed a self-assessment but hasn’t received ATO yet. What RMF step are they in?

This response will be reviewed and graded after submission.

hich CSF function includes restoring capabilities after a cyber incident?

Protect

Detect

Recover

Respond

What is one shared goal between RMF and CSF?

Continuous compliance monitoring

Enforcing federal-only standards

Limiting security to IT systems only

Reducing threat intelligence sharing