Which two supply chain risk activities does NIST map to the operate and maintain phase of the procurement process? Choose two.

Answer: B. Continuous risk monitoring of the service
A. Continuous risk monitoring of the supplier

SP 800-161r1's procurement table maps criticality at planning, controls at requirements, initial assessment at market analysis, completed assessment at bid, and continuous risk monitoring of service, supplier and product at operate and maintain.

Source: NIST SP 800-161 Rev. 1 (NIST) — Table 3-1 C-SCRM in the Procurement Process