Which outcome describes identifying and understanding all stages of the information life cycle for each information type processed, stored, or transmitted by the system?

• A. The system is registered for purposes of management, accountability, coordination, and oversight.
• B. All stages of the information life cycle are identified and understood for each information type processed, stored, or transmitted by the system.
• C. Security categorization results are reviewed and approved by senior leaders.
• D. The placement of the system within the enterprise architecture is determined.

Answer: (B)

Understanding the entire information life cycle for every information type processed, stored, or transmitted by the system is what this item tests. The best choice states that all stages of the information life cycle are identified and understood for each information type, which means you can map controls, handling requirements, and governance to every phase the data goes through—from creation or receipt, through use and sharing, to storage, retention, and eventual disposal.

This matters because recognizing every stage ensures appropriate protections and compliance are applied consistently across processing, storage, and transmission. It enables precise risk management and controls tailored to how each information type moves and is handled.

The other statements describe governance registration, senior review of security categorization, or placement within enterprise architecture. While those are important, they don’t guarantee a comprehensive understanding of the information’s lifecycle, which is essential for effective information handling and RMF compliance.