Sustaining Operational Resiliency: A Process Improvement Approach to Security Management
Organizations face an ever-changing risk environment. The risk that emanates from the day-to-day activities of the organization, operational risk, is the subject of increasing attention, particularly in the banking and finance industry, because of the potential to significantly disrupt an organizations pursuit of its mission. Security, business continuity, and IT operations management are activities that traditionally support operational risk management. But collectively, they also converge to improve the operational resiliency of the organization—the ability to adapt to a changing operational risk environment as necessary. Coordinating these efforts to sustain operational resiliency requires a process-oriented approach that can be defined, measured, and actively managed. This report describes the fundamental elements and benefits of a process approach to security and operational resiliency and provides a notional view of a framework for process improvement.
This report is related to the following area(s) of work:
Security and SurvivabilityTechnical Note
CMU/SEI-2006-TN-009
April 2006
Cite This Report
SEI:
Caralli, Richard; Sustaining Operational Resiliency: A Process Improvement Approach to Security Management (CMU/SEI-2006-TN-009). Software Engineering Institute, Carnegie Mellon University, 2006. http://www.sei.cmu.edu/library/abstracts/reports/06tn009.cfm
IEEE:
R. Caralli, "Sustaining Operational Resiliency: A Process Improvement Approach to Security Management," Software Engineering Institute, Carnegie Mellon University, Pittsburgh, Pennsylvania, Technical Note CMU/SEI-2006-TN-009, 2006. http://www.sei.cmu.edu/library/abstracts/reports/06tn009.cfm
APA:
Caralli, R., (2006). Sustaining Operational Resiliency: A Process Improvement Approach to Security Management (CMU/SEI-2006-TN-009). Retrieved May 19, 2013, from the Software Engineering Institute, Carnegie Mellon University website: http://www.sei.cmu.edu/library/abstracts/reports/06tn009.cfm
CHI:
Caralli, Richard, Sustaining Operational Resiliency: A Process Improvement Approach to Security Management (CMU/SEI-2006-TN-009). Pittsburgh, PA: Software Engineering Institute, Carnegie Mellon University, 2006. http://www.sei.cmu.edu/library/abstracts/reports/06tn009.cfm
MLA:
Caralli, R., 2006. Sustaining Operational Resiliency: A Process Improvement Approach to Security Management (Technical Report CMU/SEI-2006-TN-009). Pittsburgh: Software Engineering Institute, Carnegie Mellon University. http://www.sei.cmu.edu/library/abstracts/reports/06tn009.cfm
Find Us Here
Share This Page
For more information
