Nick is following the National Institute of Standards and Technology $($NIST$)$ Risk Management Framework $($RMF$)$ and has completed the prepare and categorize steps. Which step in the risk management framework is next?