How do you estimate time to perform the second and third steps of RMF process (Implement and Assess controls)? Any examples - say for a MMM system? I realize it depends on complexity of system, but a general estimate or method or determing the LOE.
[link] [comments]