$10)$ A system impact$-$level prioritization is an optional organization$-$level task in the prepare step of the Risk Management Framework. When is this task typically completed? A$)$ After security controls are assessed. B$)$ During the prepare step at the initiation phase of the SDLC$.$ C$)$ After controls for the system are selected. D$)$ After system categorization.Option B is incorrect but tempting to think it is the right answer because this task is listed under the prepare step as an organization level prepare task, but at this point, the organization only makes a decision to prioritize the impact level for the system, and not the implementation of the decision.