Measuring Operational Resilience Using the CERT Resilience Management Model
Measurement involves transforming management decisions, such as strategic direction and policy, into action, and measuring the performance of that action. As organizations strive to improve their ability to effectively manage operational resilience, it is essential that they have an approach for determining what measures best inform the extent to which they are meeting their performance objectives. Operational resilience comprises the disciplines of security, business continuity, and aspects of IT operations.
The reference model used as the foundation for this research project is the CERT Resilience Management Model v1.0. This model provides a process-based framework of goals and practices at four increasing levels of capability and defines twenty six process areas, each of which includes a set of candidate measures. Meaningful measurement occurs in a context so this approach is further defined by exploring and deriving example measures within the context of selected ecosystems, which are collections of process areas that are required to meet a specific objective. Example measures are defined using a measurement template.
This report is the first in a series and is intended to start a dialogue on this important topic.
Related Reading
Measures for Managing Operational Resilience
Using Defined Processes as a Context for Resilience Measures
This report is related to the following area(s) of work:
Security and SurvivabilityTechnical Note
CMU/SEI-2010-TN-030
September 2010
Cite This Report
SEI:
Allen, Julia; & Davis, Noopur. Measuring Operational Resilience Using the CERT Resilience Management Model (CMU/SEI-2010-TN-030). Software Engineering Institute, Carnegie Mellon University, 2010. http://www.sei.cmu.edu/library/abstracts/reports/10tn030.cfm
IEEE:
J. Allen, and N. Davis, "Measuring Operational Resilience Using the CERT Resilience Management Model," Software Engineering Institute, Carnegie Mellon University, Pittsburgh, Pennsylvania, Technical Note CMU/SEI-2010-TN-030, 2010. http://www.sei.cmu.edu/library/abstracts/reports/10tn030.cfm
APA:
Allen, J., & Davis, N. (2010). Measuring Operational Resilience Using the CERT Resilience Management Model (CMU/SEI-2010-TN-030). Retrieved May 20, 2013, from the Software Engineering Institute, Carnegie Mellon University website: http://www.sei.cmu.edu/library/abstracts/reports/10tn030.cfm
CHI:
Allen, Julia, and Noopur Davis. Measuring Operational Resilience Using the CERT Resilience Management Model (CMU/SEI-2010-TN-030). Pittsburgh, PA: Software Engineering Institute, Carnegie Mellon University, 2010. http://www.sei.cmu.edu/library/abstracts/reports/10tn030.cfm
MLA:
Allen, J., & Davis, N. 2010. Measuring Operational Resilience Using the CERT Resilience Management Model (Technical Report CMU/SEI-2010-TN-030). Pittsburgh: Software Engineering Institute, Carnegie Mellon University. http://www.sei.cmu.edu/library/abstracts/reports/10tn030.cfm
Find Us Here
Share This Page
For more information
