The phase 0 of Risk Management Framework (RMF) is known as strategic risk assessment
planning. Which of the following processes take place in phase 0? Each correct answer
represents a complete solution. Choose all that apply.

A.
Establish criteria that will be used to evaluate threats, vulnerabilities, and controls.

B.
Identify threats, vulnerabilities, and controls that will be evaluated.

C.
Review documentation and technical data.

D.
Establish criteria that will be used to classify and rank data assets.

E.
Apply classification criteria to rank data assets and related IT resources.