The structure of DoD information technology is divided into two full risk management framework (RMF) process categories: assess and authorize.
a) Assess
b) Authorize