Request for Comment

Enterprise Security Security & Resiliency Engineering Governing for Enterprise Security
Information Security Assessments and Evaluations OCTAVE^sm
Threat Analysis and Modeling Insider Threat

Publications Catalog Historical Documents CERT Contact Information CERT Statistics Meet CERT Employment Opportunities

CERT Resiliency Engineering Framework

Please provide your feedback to the Resiliency Engineering Framework by completing the form below. Please use this form as many times as is necessary to supply all of your comments.

1)	Capability Area or General (required) (Please enter the capability area for which the comment is provided, or ‘General’ if the comment does not apply to a specific capability area.)
2)	Capability Area Section (required) (Please enter the numeric section designation for the capability area section for which the comment is provided. Enter ‘Intro’ if the comment applies to the intro section of the capability area. Enter ‘NA’ if the comment is not associated with a capability area.)
3)	Comment (required) (Please enter your comment here.) (maximum of 250 characters)
4)	Reviewer Name (required)
5)	Reviewer Email (required)
6)	Additional Notes (Please enter any additional comments, notes, or reference sources here.) (maximum of 250 characters)
	To prevent automated posts, please enter the text shown on the image as the verification code below. Verification Code (required) feedback. Press to clear the form and start over.

Resources

Reports

Introducing the CERT Resiliency Engineering Framework: Improving the Security and Sustainability Processes (CMU/SEI-2007TR-009, May 2007) (pdf)
The Critical Success Factors Method: Establishing a Foundation for Security and Resiliency Engineering (CMU/SEI-2004-TR-010, July 2004) (pdf)
Managing for Enterprise Security (CMU/SEI-20040TN-046, December 2004) (pdf)
Sustaining Operational Resiliency: A Process Improvement Approach to Security Management (CMU/SEI-2006-TN-009, April 2006) (pdf)

Podcasts

Presentations

Operational Resiliency Management (Presentation to Federal Reserve Bank Business Continuity Conference, September 20, 2006, Chicago, IL)
Resiliency Engineering Framework (Presentation to FSTC Annual Meeting, October 11, 2006, New York, NY)
Sustaining Operational Resiliency: A Process Improvement Approach To Security Management (Presentation to Bank Security Summit, June 2006, Chicago, IL)
Focus on Resiliency: A Process Improvement Approach to Security (Presentation to CSI 33rd Annual Security Conference and Exhibition, November 6, 2007, Orlando, FL)
Focus on Resiliency: A Process Improvement Approach to Security (Presentation to SEPG 2007, March 27, 2007, Austin, TX)
CERT Resiliency Engineering Framework (Presentation to BITS Advisory Council Meeting, March 1, 2007, Washington, DC)

Other Documents

Resiliency Engineering Framework FAQ (pdf)

Last updated February, 2008