Using Defined Processes as a Context for Resilience Measures
The CERT® Resilient Enterprise Management (REM) team is researching operational resilience and the organizational processes that support it. This technical note, which builds on two previous reports, describes how implementation-level processes can provide the necessary context for identifying and defining measures of operational resilience. The team's first report, Measuring Operational Resilience Using the CERT® Resilience Management Model (CMU/SEI-2010-TN-030), defined high-level objectives for an operational resilience management system, demonstrated how to derive meaningful measures from those objectives, and presented a template for defining resilience measures. The team's second report, Measures for Managing Operational Resilience (CMU/SEI-2011-TR-019), suggested strategic measures for managing operational resilience and provided candidate measures for the 26 process areas of the CERT® Resilience Management Model, Version 1.1 (CERT®-RMM).
While CERT-RMM defines the commonly used or best practices for operational resilience-what an organization should do-organization-specific processes must be defined at the implementation level to describe how to perform those practices. Organizations can then identify and define measures within the context of their specific processes and procedures. Organizations can use the measures to evaluate process performance and operational resilience and identify opportunities for improvement. This technical note provides examples and templates for defining processes and procedures and for defining related assets and measures.
Related Reading
Measuring Operational Resilience Using the CERT Resilience Management Model
Measures for Managing Operational Resilience
This report is related to the following area(s) of work:
Security and SurvivabilityTechnical Note
CMU/SEI-2011-TN-029
December 2011
Cite This Report
SEI:
Allen, Julia; Curtis, Pamela; & Parker Gates, Linda. Using Defined Processes as a Context for Resilience Measures (CMU/SEI-2011-TN-029). Software Engineering Institute, Carnegie Mellon University, 2011. http://www.sei.cmu.edu/library/abstracts/reports/11tn029.cfm
IEEE:
J. Allen, P. Curtis, and L. Parker Gates, "Using Defined Processes as a Context for Resilience Measures," Software Engineering Institute, Carnegie Mellon University, Pittsburgh, Pennsylvania, Technical Note CMU/SEI-2011-TN-029, 2011. http://www.sei.cmu.edu/library/abstracts/reports/11tn029.cfm
APA:
Allen, J., Curtis, P., & Parker Gates, L. (2011). Using Defined Processes as a Context for Resilience Measures (CMU/SEI-2011-TN-029). Retrieved May 25, 2013, from the Software Engineering Institute, Carnegie Mellon University website: http://www.sei.cmu.edu/library/abstracts/reports/11tn029.cfm
CHI:
Allen, Julia, Pamela Curtis, and Linda Parker Gates. Using Defined Processes as a Context for Resilience Measures (CMU/SEI-2011-TN-029). Pittsburgh, PA: Software Engineering Institute, Carnegie Mellon University, 2011. http://www.sei.cmu.edu/library/abstracts/reports/11tn029.cfm
MLA:
Allen, J., Curtis, P., & Parker Gates, L. 2011. Using Defined Processes as a Context for Resilience Measures (Technical Report CMU/SEI-2011-TN-029). Pittsburgh: Software Engineering Institute, Carnegie Mellon University. http://www.sei.cmu.edu/library/abstracts/reports/11tn029.cfm
Find Us Here
Share This Page
For more information
