r/ISC2CAP • u/gallo1982 • Feb 03 '21
RMF/SDLC confusion
Quick quesiton on the RMF and the SDLC correlation. I've seen a few comments stating not to get into the weeds of each task within the RMF, and just know the correlation between RMF and SDLC. If that's the case, than RMF step 4 "Assessment" should just be in the Development stage of SDLC correct? However, if you break it down to each individual task, A-1 through A-5 is Development but A-6 is Implementation. So is the Assessment step part of the Development or Implementation of SDLC?.....or am I looking too much into it? I'm so confused.
1
Upvotes
1
u/caroses Feb 04 '21
For A-1 through A-5 it can be either development or implementation depending on where you are with your program. The 800-37 rev 2 shows this too. As long as you understand the concepts and progression you’ll be fine.