Nick is following the National Institute of Standards and Technology $($NIST$)$ Risk Management Framework $($RMF$)$ and has completed the prepare and categorize steps. Which step in the risk management framework is next?

Question $3$ options:

Assessing controls

Implementing controls

Monitoring controls

Selecting controls