CGRC · Question #462
What is the system development life cycle phase for step six of the RMF for a new system? Response:
The correct answer is C. Implementation/Assessment. Step six of the NIST Risk Management Framework (RMF) is 'Authorize,' which corresponds to the Implementation/Assessment phase of the System Development Life Cycle (SDLC).
Question
What is the system development life cycle phase for step six of the RMF for a new system? Response:
Options
- AOperations/Maintenance
- BMaintenance
- CImplementation/Assessment
- DDevelopment and Acquisition
How the community answered
(50 responses)- A6% (3)
- B18% (9)
- C72% (36)
- D4% (2)
Why each option
Step six of the NIST Risk Management Framework (RMF) is 'Authorize,' which corresponds to the Implementation/Assessment phase of the System Development Life Cycle (SDLC).
Operations/Maintenance is typically associated with the RMF's Monitor step (Step 7), not the Authorize step (Step 6).
Maintenance is a general SDLC term but does not specifically map to the RMF's Authorize step.
In the NIST RMF, Step 6 is 'Authorize,' where the authorizing official makes a risk determination and accepts the system, aligning with the Implementation/Assessment phase of the SDLC.
Development and Acquisition is associated with earlier RMF steps like Categorize, Select, and Implement, but not primarily with the Authorize step.
Concept tested: NIST RMF steps to SDLC phases mapping
Source: https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-37r2.pdf
Topics
Community Discussion
No community discussion yet for this question.