Building an Incident Management Body of Knowledge

SEI Report
In this paper, the authors describe the components of the CERT Incident Management Body of Knowledge (CIMBOK) and how they were constructed.
Publisher

Software Engineering Institute

Abstract

The CERT Incident Management Body of Knowledge (CIMBOK) was built using a systematic process that starts with a controlled vocabulary and evolves through taxonomies, static ontologies, dynamic ontologies, intentional ontologies, and metamodels. The CIMBOK builds on 10 previous standards for incident management. This paper describes the components of the CIMBOK and how they were constructed.

Cite This SEI Report

Mundie, D., & Ruefle, R. (2012, September 7). Building an Incident Management Body of Knowledge. Retrieved August 17, 2026, from https://www.sei.cmu.edu/library/building-an-incident-management-body-of-knowledge/.

@techreport{mundie_2012,
author={Mundie, David and Ruefle, Robin},
title={Building an Incident Management Body of Knowledge},
month={Sep},
year={2012},
institution={Software Engineering Institute, Carnegie Mellon University},
url={https://www.sei.cmu.edu/library/building-an-incident-management-body-of-knowledge/},
note={Accessed: 2026-Aug-17}
}

Mundie, David, and Robin Ruefle. "Building an Incident Management Body of Knowledge." Software Engineering Institute, Carnegie Mellon University. Software Engineering Institute, September 7, 2012. https://www.sei.cmu.edu/library/building-an-incident-management-body-of-knowledge/.

D. Mundie, and R. Ruefle, "Building an Incident Management Body of Knowledge," Software Engineering Institute, Carnegie Mellon University. Software Engineering Institute, 7-Sep-2012 [Online]. Available: https://www.sei.cmu.edu/library/building-an-incident-management-body-of-knowledge/. [Accessed: 17-Aug-2026].

Mundie, David, and Robin Ruefle. "Building an Incident Management Body of Knowledge." Software Engineering Institute, Carnegie Mellon University, Software Engineering Institute, 7 Sep. 2012. https://www.sei.cmu.edu/library/building-an-incident-management-body-of-knowledge/. Accessed 17 Aug. 2026.

Mundie, David; & Ruefle, Robin. Building an Incident Management Body of Knowledge. Software Engineering Institute. 2012. https://www.sei.cmu.edu/library/building-an-incident-management-body-of-knowledge/