The first RMF-mandated step in CAM is Prepare. In this step, you can set up authorization boundaries, control overlays, and information types, as well as create the actual authorization package.

When the Prepare step has been completed, the subsequent six steps cycle over and over to ensure continuous authorization and monitoring of controls.