Which task concerns Impact-Level Prioritization (Optional)?

• A. Continuous Monitoring Strategy - Organization
• B. Impact-Level Prioritization
• C. Mission or Business Focus
• D. System Registration

Answer: (B)

Prioritizing work by impact level focuses on directing effort and resources to the areas that would affect the mission or system the most if something went wrong. This is an optional approach some organizations use to tailor risk management to their specific needs and risk appetite.

The task that directly matches this concept is the one named Impact-Level Prioritization, since it explicitly describes prioritization based on impact levels. The other options address different aspects: Continuous Monitoring Strategy - Organization is about how to sustain ongoing oversight across the enterprise; Mission or Business Focus centers on aligning security with overall mission or business objectives; System Registration deals with cataloging and registering the system within the RMF process.