Which task addresses System Registration?

• A. System Registration
• B. Information Types
• C. Ongoing Assessments
• D. Authorization Package

Answer: (A)

In RMF practice, the first formal action for a new system is to register it in the RMF catalog. System Registration creates the official entry that defines the system’s identity, boundaries, ownership, environment, and the data flows it handles. This establishes the scope and foundation for everything that follows, so all subsequent steps—categorization, control selection, implementation, assessment, authorization, and monitoring—are aligned to the same system record.

That’s why System Registration is the best fit: it is the task that explicitly handles creating and documenting the system’s identity and scope in preparation for the rest of the RMF process. The other choices pertain to different aspects—Information Types concerns data handled by the system, Ongoing Assessments relate to continuous monitoring after authorization, and the Authorization Package is the collection of artifacts assembled for the authorization decision, not the registration step.