$12).$ One of the main tasks in the risk management framework is completing a sensitivity rating for information types that ultimately generate the overall system security$/$privacy categorization of the system used to support organizational business needs. At what level in the RMF process are the information types determined? A$)$ Categorize step B$)$ Select step C$)$ Prepare step D$)$ Implement ste