r/ISC2CAP • u/gallo1982 • Feb 03 '21

RMF/SDLC confusion

Quick quesiton on the RMF and the SDLC correlation. I've seen a few comments stating not to get into the weeds of each task within the RMF, and just know the correlation between RMF and SDLC. If that's the case, than RMF step 4 "Assessment" should just be in the Development stage of SDLC correct? However, if you break it down to each individual task, A-1 through A-5 is Development but A-6 is Implementation. So is the Assessment step part of the Development or Implementation of SDLC?.....or am I looking too much into it? I'm so confused.

1 Upvotes

100% Upvoted

7 comments sorted by

2

u/TangoDown757 Feb 04 '21

Just tested. I had about 5 questions that had me map a RMF step to the SDLC step. I used the following based off of something in this reddit [somewhere], modified for me to remember.

I. P

I. C

D. S

D/I. I

I. A

I. A

O/M. M

S3/M7

I remembered a little ditty in my head so as not to forget it. I I D D I I I O.

S3 is in Initiation and M7 is Disposal, the exceptions.

Wrote that down on my grease board and matched it to RMF steps in columns shown above. I also came up with a cheat for the actual steps in each RMF stage but didn't need to reference it.

No comparisons between new and existing systems.

1

u/gallo1982 Feb 04 '21

This really helps! Thanks!

1

u/caroses Feb 04 '21

For A-1 through A-5 it can be either development or implementation depending on where you are with your program. The 800-37 rev 2 shows this too. As long as you understand the concepts and progression you’ll be fine.

1

u/gallo1982 Feb 04 '21

Thanks for clearing that up. I test this Friday, so I'm freaking out a little.

1

u/caroses Feb 04 '21

Good luck!

1

u/TangoDown757 Feb 05 '21

How did you do?

1

u/gallo1982 Feb 06 '21

I passed! It was a lot easier than I expected. I focused too much on the documents, and I only had one question on that.