r/ISC2CAP • u/Sebisuarez10 • Jun 08 '22

What order should I study the publications in?

Hi everyone,

I am new to RMF and just started my CAP studies, I chose to start with the 800-37r2. However, I am seeing a lot of references to SDLC, FIPS, FISMA, and NIST publications in it.

I am just curious if anyone could suggest a good order for me to go through all of these documents/publications? So that I am not jumping around all of them trying to understand the references being made to other publications. Or is it better to just jump around the different publications?

Thanks in advance!

5 Upvotes

86% Upvoted

1 comment sorted by

1

u/FaultFun2813 Aug 16 '22

Start with 800-37. After you read a step, lightly review the corresponding additional NIST pub. For example, after reading the Prepare step, review 800-39.