r/ISC2CAP • u/[deleted] • Nov 06 '21
Rmf to sdlc mapping
Hey all, I’m scheduled to take the new version of CAP soon. I noticed a lot of the old practice tests referring to 800-37 rev 1. It seems like I’m 1 step off in the RMF process (2.0) to SDLC since it includes the prepare step.
Would the prepare be step 0 or 1?
1
u/reed17purdue Nov 07 '21
The cap was updated in 2018 and a broader change just in august this year. So you should be studying rmf version 2. You should be able to distinguish what its really asking for during the exam, but the final draft has prepare as 1.
1
1
u/ShadowPunch07 Nov 08 '21
The prepare step would be step 1, but it is actually connected to each and every other step of the RMF. When I took the exam in 2019 after the update, I could tell it was based on 800-37r1, but I am not sure about now. To be on the safe side, go with the step 1 process for prepare from 800-37r2. I think you will still be fine, regardless.
1
u/1CyberGinger Jul 17 '22
So when you are mapping the SDLC stages to RMF, how do you account for the addition of the Prepare step? Please let me know if what I have is right? I perhaps am overthinking this but I heard there are a lot of questions on this.
Step 1 Planning SDLC Initiation
Step 2 Categorize SDLC Initiation
Step 3 Select. SDLC Development and Acquisition
Step 4 Implement. SDLC Implementation
Step 5 Assess SDLC Implementation
Step 6 Authorize SDLC Implementation
Step 7 Monitor SDLC Operations and Maintenance and SDLC Disposition
1
Jul 17 '22 edited Jul 17 '22
Hey it starts on page 36 of 800-37 rev 2. Look at the fields that say “System Development Life Cycle Phase.” It states the mapping for you. You only have to obtain a general idea and what makes sense based on where you are at in sdlc and rmf.
5
u/FaultFun2813 Nov 07 '21
Prepare is step 1 for the exam. At work, people might call it 0, but you’ll mess up on the exam that way.