Step 5 Authorize - Information System - Authorization - OA happens here and it is affected by the ISCM strategy define under Phase six of the RMF (continuous Monitoring). What is the purpose of OA in the authorization process?
1) To ensure the system is compliant with security policies
2) To grant access to authorized users
3) To monitor the system for any unauthorized activities
4) To evaluate the effectiveness of the ISCM strategy