Advanced Search

Content Type

Topics

Publication Date

The Critical Success Factor Method: Establishing a Foundation for Enterprise Security Management

Abstract

Every organization has a mission that describes why it exists (its purpose) and where it intends to go (its direction). The mission reflects the organization's unique values and vision. Achieving the mission takes the participation and skill of the entire organization. The goals and objectives of every staff member must be aimed toward the mission. However, achieving goals and objectives is not enough. The organization must perform well in key areas on a consistent basis to achieve the mission. These key areas—unique to the organization and the industry in which it competes—can be defined as the organization's critical success factors. 

The critical success factor method is a means for identifying these important elements of success. It was originally developed to align information technology planning with the strategic direction of an organization. However, in research and fieldwork undertaken by members of the Survivable Enterprise Management (SEM) team at the Software Engineering Institute, it has shown promise in helping organizations guide, direct, and prioritize their activities for developing security strategies and managing security across their enterprises. This report describes the critical success factor method and presents the SEM team's theories and experience in applying it to enterprise security management.

Cite This Report

Show Citation Formats

SEI

Caralli, Richard; Stevens, James; Willke, Bradford; & Wilson, William. The Critical Success Factor Method: Establishing a Foundation for Enterprise Security Management (CMU/SEI-2004-TR-010). Software Engineering Institute, Carnegie Mellon University, 2004. http://resources.sei.cmu.edu/library/asset-view.cfm?AssetID=7129

IEEE

Caralli. Richard, Stevens. James, Willke. Bradford, and Wilson. William, "The Critical Success Factor Method: Establishing a Foundation for Enterprise Security Management," Software Engineering Institute, Carnegie Mellon University, Pittsburgh, Pennsylvania, Technical Report CMU/SEI-2004-TR-010, 2004. http://resources.sei.cmu.edu/library/asset-view.cfm?AssetID=7129

APA

Caralli, Richard., Stevens, James., Willke, Bradford., & Wilson, William. (2004). The Critical Success Factor Method: Establishing a Foundation for Enterprise Security Management (CMU/SEI-2004-TR-010). Retrieved September 30, 2014, from the Software Engineering Institute, Carnegie Mellon University website: http://resources.sei.cmu.edu/library/asset-view.cfm?AssetID=7129

CHI

Richard Caralli, James Stevens, Bradford Willke, & William Wilson. The Critical Success Factor Method: Establishing a Foundation for Enterprise Security Management (CMU/SEI-2004-TR-010). Pittsburgh, PA: Software Engineering Institute, Carnegie Mellon University, 2004. http://resources.sei.cmu.edu/library/asset-view.cfm?AssetID=7129

MLA

Caralli, Richard., Stevens, James., Willke, Bradford., & Wilson, William. 2004. The Critical Success Factor Method: Establishing a Foundation for Enterprise Security Management (Technical Report CMU/SEI-2004-TR-010). Pittsburgh: Software Engineering Institute, Carnegie Mellon University. http://resources.sei.cmu.edu/library/asset-view.cfm?AssetID=7129