SDLC

Question 1

RMF and SDLC

Answer 1

SDLC Phases:

1) Initiation (RMF Steps 1 and 2)
2) Development and Acquisition (RMF Step 2)
3) Implementation (RMF Steps 3-5)
4) Operations and Maintenance (RMF Step 6)
5) Disposition (RMF Step 6)

RMF -

1) Categorize
2) Select
3) Implement
4) Assess
5) Authorize
6) Monitor

Question 2

SDLC - Step 1

Answer 2

INITIATION

• Why do we need it?
• How does it support the mission
• Investment review and budget

Security Considerations

• conduct initial risk assessment
• identify ISSO
• FIPs 199
• FIPs 200

Question 3

SDLC - Step 2

Answer 3

DEVELOPMENT AND ACQUISITION

• Functional statement of need
• Feasibility Study
• Cost Benefit Analysis

Security Considerations

• Risk Assessment
• Security Planning
• Security Control Development

Question 4

SDLC - Step 3

Answer 4

IMPLEMENTATION

• Installation
• Inspection
• Acceptance Ttesting
• initial user training
• documentation

Security Considerations

• Inspection and Acceptance
• System integration
• Security Certification Executed
• Security Accreditation Decision

Question 5

SDLC - Step 4

Answer 5

OPERATION AND MAINTENANCE

• Performance Measurement
• Contract Modification
• Operations
• Maintenance

Security Considerations

• Configuration mgmt and control
• Continuous Monitoring

Question 6

SDLC - Step 5

Answer 6

DISPOSITION

• Appropriateness of Disposal
• Exchange & Sale
• Internal Organizational Screening
• Transfer - Donation
• Contract Closeout

Security Considerations

• Information Preservation
• Media Sanitization
• HW and SW Disposal