The Risk Management Framework RMF and associated RMF tasks apply to ...
a. Common Control Providers
b. All Information System Owners
c. Only Information Owners
d. Common Control Providers and Information System Owners