Why the 13 SDLC Phases Are a Customizable Enterprise Superset - Systems Development Lifecycle (SDLC) Best Practices
Why the 13 SDLC Phases Are a Customizable Enterprise Superset
(Chapter 17 of Systems Development Lifecycle (SDLC) Best Practices)
Executive Summary: Chapter Overview
IF4ITThe Bottom Line
Core Concepts
| Concept | Definition & Strategic Role |
|---|---|
| Enterprise Superset | The complete set of lifecycle responsibilities available for governed selection. |
| Tailoring | Approved adjustment within published lifecycle rules. |
| Alternative Method | A different approved mechanism that still satisfies an applicable requirement. |
Quick Q&A
Question: Why not publish only a short five-stage model?
Question: Does customization reduce governance?
Read More Below
This chapter explains why the IF4IT phase model is deliberately comprehensive and how enterprises adapt it without weakening required outcomes.
A Comprehensive Reference Model
A detailed superset exposes responsibilities that shorter models often hide, including supplier evaluation, training, staging, operational readiness, ongoing maintenance, Technical Debt, and retirement. The enterprise can then select a proportionate Path rather than pretending omitted responsibilities do not exist.
Customization Mechanisms
Customization should occur through standard SDLC Paths, Release-specific Utilization Profiles, risk-based depth, approved alternative methods, and explicit exceptions. Tailoring is not an undocumented decision to skip work.
Simplify Mechanisms, Preserve Obligations
Smaller or lower-risk work may use concise records, combined Activities, inherited evidence, shared Environments, and delegated Gates. The governing rule is: simplify the mechanism before eliminating the obligation.
This simplification scales with maturity. A Crawl-maturity enterprise might satisfy the superset for a low-risk Release with a single combined Planning-and-Requirements record and evidence inherited from a similar prior Release. The same class of Release at Walk maturity would use a standard Path with defined roles, a dedicated Utilization Profile, and tracked Gate decisions. At Run maturity, phase applicability and depth would be recommended automatically from Solution characteristics and simply confirmed by an accountable owner.
Example
A minor SaaS workflow configuration may use Planning, Requirements Capture, configuration validation, UAT, PROD, and OPS. A regulated data pipeline may also require Design, SIT, data-quality validation, migration rehearsal, security review, and audit evidence. An AI-assisted underwriting service may require Research and Prototyping, model validation, bias testing, human-override design, monitoring, and drift controls. The 13 phases provide an enterprise superset: each initiative selects the phases needed for its risks and outcomes rather than treating every phase as mandatory in identical form.

Common Antipatterns
Enterprises should avoid assuming every one of the 13 phases must be used at full depth for every Release. The 13 phases form a comprehensive enterprise superset meant to be tailored down through approved Paths and Utilization Profiles, not a mandatory checklist every Release must satisfy identically; assuming full-depth application everywhere creates unnecessary ceremony for low-risk work.
| Antipattern | Why it fails |
|---|---|
| Assuming every one of the 13 phases must be used at full depth for every Release | The 13 phases form a comprehensive superset meant to be tailored down through approved Paths, not a mandatory checklist every Release must satisfy identically; full-depth application everywhere creates unnecessary ceremony. |
Connections to Related IF4IT Practices and Inventories
The IF4IT Enterprise Model, Enterprise Capability Models, and the Capabilities Inventory and Attributes keep this chapter’s decisions and responsibilities connected to enterprise structure, capability ownership, and measurable business outcomes. Use Application Portfolio Management (APM) Best Practices and the Applications Inventory and Attributes to place this SDLC decision in the context of application ownership, portfolio value, lifecycle state, and dependencies.
For Why the 13 SDLC Phases Are a Customizable Enterprise Superset, IT leaders and managers should establish explicit decision rights, accountable ownership, proportional controls, evidence expectations, performance measures, and continuous-improvement feedback tied to enterprise value.
How to cite this page
When referencing this page in academic work, internal standards, or external publications, include the page title, IF4IT as author and publisher (The International Foundation for Information Technology (IF4IT), LLC), the URL, and your access date.
Example (informal web citation):
The International Foundation for Information Technology (IF4IT), LLC. Why the 13 SDLC Phases Are a Customizable Enterprise Superset | Systems Development Lifecycle (SDLC) Best Practices. https://if4it.org/best-practices/systems-development-lifecycle-sdlc/why-the-13-sdlc-phases-are-a-customizable-enterprise-superset/ (accessed 2026-09-04).
See About Us for content governance and site-wide citation guidance.
Copyright for The International Foundation for Information Technology (IF4IT), LLC: 2008 - Present
Legal Disclaimers