According to the NIST Risk Management Framework, how is the security and privacy posture of information systems and organizations determined?
A) Continuous Monitoring
B) Incident Response
C) Security Assessment
D) Risk Mitigation