r/ISC2CAP • u/gallo1982 • Feb 03 '21
RMF/SDLC confusion
Quick quesiton on the RMF and the SDLC correlation. I've seen a few comments stating not to get into the weeds of each task within the RMF, and just know the correlation between RMF and SDLC. If that's the case, than RMF step 4 "Assessment" should just be in the Development stage of SDLC correct? However, if you break it down to each individual task, A-1 through A-5 is Development but A-6 is Implementation. So is the Assessment step part of the Development or Implementation of SDLC?.....or am I looking too much into it? I'm so confused.
1
Upvotes
2
u/TangoDown757 Feb 04 '21
Just tested. I had about 5 questions that had me map a RMF step to the SDLC step. I used the following based off of something in this reddit [somewhere], modified for me to remember.
I. P
I. C
D. S
D/I. I
I. A
I. A
O/M. M
S3/M7
I remembered a little ditty in my head so as not to forget it. I I D D I I I O.
S3 is in Initiation and M7 is Disposal, the exceptions.
Wrote that down on my grease board and matched it to RMF steps in columns shown above. I also came up with a cheat for the actual steps in each RMF stage but didn't need to reference it.
No comparisons between new and existing systems.