Certified Information Systems Security Professional – CISSP – Question355 Which step of the Risk Management Framework (RMF) identifies the initial set of baseline security controls? A. Selection B. Monitoring C. Implementation D. Assessment Show Answer Hide Answer Correct Answer: A Explanation: Reference: https://csrc.nist.gov/projects/risk-management/risk-management-fram…