Incident Management Capability Metrics Version 0.1
Successful management of incidents that threaten an organizations computer security is a complex endeavor. Frequently an organizations primary focus on the response aspects of security incidents results in its failure to manage incidents beyond simply reacting to threatening events.
The metrics presented in this document are intended to provide a baseline or benchmark of incident management practices. The incident management functions—provided in a series of questions and indicators—define the actual benchmark. The questions explore different aspects of incident management activities for protecting, defending, and sustaining an organizations computing environment in addition to conducting appropriate response actions. This benchmark can be used by an organization to assess how its current incident management capability is defined, managed, measured, and improved. This will help assure the system owners, data owners, and operators that their incident management services are being delivered with a high standard of quality and success, and within acceptable levels of risk.
This report is related to the following area(s) of work:
Security and SurvivabilityTechnical Report
CMU/SEI-2007-TR-008
April 2007
Cite This Report
SEI:
Dorofee, Audrey; Killcrece, Georgia; Ruefle, Robin; & Zajicek, Mark. Incident Management Capability Metrics Version 0.1 (CMU/SEI-2007-TR-008). Software Engineering Institute, Carnegie Mellon University, 2007. http://www.sei.cmu.edu/library/abstracts/reports/07tr008.cfm
IEEE:
A. Dorofee, G. Killcrece, R. Ruefle, and M. Zajicek, "Incident Management Capability Metrics Version 0.1," Software Engineering Institute, Carnegie Mellon University, Pittsburgh, Pennsylvania, Technical Report CMU/SEI-2007-TR-008, 2007. http://www.sei.cmu.edu/library/abstracts/reports/07tr008.cfm
APA:
Dorofee, A., Killcrece, G., Ruefle, R., & Zajicek, M. (2007). Incident Management Capability Metrics Version 0.1 (CMU/SEI-2007-TR-008). Retrieved May 22, 2013, from the Software Engineering Institute, Carnegie Mellon University website: http://www.sei.cmu.edu/library/abstracts/reports/07tr008.cfm
CHI:
Dorofee, Audrey, Georgia Killcrece, Robin Ruefle, and Mark Zajicek. Incident Management Capability Metrics Version 0.1 (CMU/SEI-2007-TR-008). Pittsburgh, PA: Software Engineering Institute, Carnegie Mellon University, 2007. http://www.sei.cmu.edu/library/abstracts/reports/07tr008.cfm
MLA:
Dorofee, A., Killcrece, G., Ruefle, R., & Zajicek, M. 2007. Incident Management Capability Metrics Version 0.1 (Technical Report CMU/SEI-2007-TR-008). Pittsburgh: Software Engineering Institute, Carnegie Mellon University. http://www.sei.cmu.edu/library/abstracts/reports/07tr008.cfm
Find Us Here
Share This Page
For more information
