Accreditation is the evaluation of the security controls of an IT system to establish the extent to which a particular design and implementation meets a set of specified security requirements. The risk management strategy used for A&A is depicted in the document, Risk Management Framework. Select ONE of the six steps of the framework illustrated in the Risk Management Framework.

In at least 250 words, discuss the following:

1. Identify the step and associated government document.
2. Discuss the importance of the step in the overall framework.
3. What are the consequences if the step is not included in the risk management life-cycle.