Watch this video on YouTube
During the security control assessment phase of the NIST RMF, which role is responsible for providing evidence of the correct implementation and effectiveness of security controls?