Q9
Single choice
Under NIST SP 800-37, controls have been implemented and assessed. What preserves risk management through the remaining lifecycle?