RMF Control Selection. The Contractor in coordination with the RMF Team shall select the Security control baseline* (based upon the System Categorization completed in RMF Activity 1) , Select and apply security control overlays (for CS the NIST 800-82 R2 ICS Overlay*), Conduct appropriate tailoring of the selected set of security controls to include; (Supplementing the tailored baseline security control set, and identification of Inherited Common / Hybrid Security Controls), and documenting the Final Security Control Set to be approved in the Security Plan.
