Advanced Search

Content Type

Topics

Publication Date

Incident Management Capability Metrics Version 0.1

Abstract

Successful management of incidents that threaten an organizations computer security is a complex endeavor. Frequently an organizations primary focus on the response aspects of security incidents results in its failure to manage incidents beyond simply reacting to threatening events.  

The metrics presented in this document are intended to provide a baseline or benchmark of incident management practices. The incident management functions—provided in a series of questions and indicators—define the actual benchmark. The questions explore different aspects of incident management activities for protecting, defending, and sustaining an organizations computing environment in addition to conducting appropriate response actions. This benchmark can be used by an organization to assess how its current incident management capability is defined, managed, measured, and improved. This will help assure the system owners, data owners, and operators that their incident management services are being delivered with a high standard of quality and success, and within acceptable levels of risk.

Cite This Report

Show Citation Formats

SEI

Dorofee, Audrey; Killcrece, Georgia; Ruefle, Robin; & Zajicek, Mark. Incident Management Capability Metrics Version 0.1 (CMU/SEI-2007-TR-008). Software Engineering Institute, Carnegie Mellon University, 2007. http://resources.sei.cmu.edu/library/asset-view.cfm?AssetID=8379

IEEE

Dorofee. Audrey, Killcrece. Georgia, Ruefle. Robin, and Zajicek. Mark, "Incident Management Capability Metrics Version 0.1," Software Engineering Institute, Carnegie Mellon University, Pittsburgh, Pennsylvania, Technical Report CMU/SEI-2007-TR-008, 2007. http://resources.sei.cmu.edu/library/asset-view.cfm?AssetID=8379

APA

Dorofee, Audrey., Killcrece, Georgia., Ruefle, Robin., & Zajicek, Mark. (2007). Incident Management Capability Metrics Version 0.1 (CMU/SEI-2007-TR-008). Retrieved April 17, 2014, from the Software Engineering Institute, Carnegie Mellon University website: http://resources.sei.cmu.edu/library/asset-view.cfm?AssetID=8379

CHI

Audrey Dorofee, Georgia Killcrece, Robin Ruefle, & Mark Zajicek. Incident Management Capability Metrics Version 0.1 (CMU/SEI-2007-TR-008). Pittsburgh, PA: Software Engineering Institute, Carnegie Mellon University, 2007. http://resources.sei.cmu.edu/library/asset-view.cfm?AssetID=8379

MLA

Dorofee, Audrey., Killcrece, Georgia., Ruefle, Robin., & Zajicek, Mark. 2007. Incident Management Capability Metrics Version 0.1 (Technical Report CMU/SEI-2007-TR-008). Pittsburgh: Software Engineering Institute, Carnegie Mellon University. http://resources.sei.cmu.edu/library/asset-view.cfm?AssetID=8379