Which NIST Special Publication defines the System Development Life Cycle (SDLC)?

• A. NIST SP 800-35
• B. NIST SP 800-36
• C. NIST SP 800-64
• D. NIST SP 800-70

Answer: (C)

Understanding how security is integrated into the development process is what this item tests. NIST SP 800-64, titled Security Considerations in the System Development Life Cycle, is the publication that defines the System Development Life Cycle and explains how security activities are performed at each phase—from initiation through disposal. That explicit definition and guidance on embedding security across the lifecycle is why this document is the correct reference. Other publications cover related topics like risk assessment or security controls, but they do not define the SDLC itself.