The Software Development Life-Cycle phase that maps to RMF Step 2 (select controls), Task 4, SP Approval? Response:

During the Development/Acquisition phase, security requirements are defined, controls are selected, and the security plan is developed and approved to ensure security is integrated into the system design or procurement. This aligns directly with RMF Step 2, where controls are chosen and approved for implementation.

The Operation/Maintenance phase occurs after controls have been selected and implemented, focusing on their ongoing monitoring and effectiveness.

Mission/business process describes the overarching purpose, not a specific SDLC phase.

Criticality/Sensitivity refers to the impact level of information, which informs control selection but is not an SDLC phase itself.