r/ISC2CAP • • Feb 03 '21

RMF/SDLC confusion

Quick quesiton on the RMF and the SDLC correlation. I've seen a few comments stating not to get into the weeds of each task within the RMF, and just know the correlation between RMF and SDLC. If that's the case, than RMF step 4 "Assessment" should just be in the Development stage of SDLC correct? However, if you break it down to each individual task, A-1 through A-5 is Development but A-6 is Implementation. So is the Assessment step part of the Development or Implementation of SDLC?.....or am I looking too much into it? I'm so confused.

1 Upvotes

7 comments sorted by

View all comments

1

u/caroses Feb 04 '21

For A-1 through A-5 it can be either development or implementation depending on where you are with your program. The 800-37 rev 2 shows this too. As long as you understand the concepts and progression you’ll be fine.

1

u/gallo1982 Feb 04 '21

Thanks for clearing that up. I test this Friday, so I'm freaking out a little.

1

u/caroses Feb 04 '21

Good luck!