Software Engineering Institute | Carnegie Mellon University
Software Engineering Institute | Carnegie Mellon University

Digital Library

Javascript is currently disabled for your browser. For an optimal search experience, please enable javascript.

Advanced Search

Basic Search

Content Type

Topics

Publication Date

Technical Report

Incident Management Capability Metrics Version 0.1

  • Abstract

    Successful management of incidents that threaten an organizations computer security is a complex endeavor. Frequently an organizations primary focus on the response aspects of security incidents results in its failure to manage incidents beyond simply reacting to threatening events.  

    The metrics presented in this document are intended to provide a baseline or benchmark of incident management practices. The incident management functions—provided in a series of questions and indicators—define the actual benchmark. The questions explore different aspects of incident management activities for protecting, defending, and sustaining an organizations computing environment in addition to conducting appropriate response actions. This benchmark can be used by an organization to assess how its current incident management capability is defined, managed, measured, and improved. This will help assure the system owners, data owners, and operators that their incident management services are being delivered with a high standard of quality and success, and within acceptable levels of risk.

  • Download

Cite This Report

SEI

Dorofee, Audrey; Killcrece, Georgia; Ruefle, Robin; & Zajicek, Mark. Incident Management Capability Metrics Version 0.1 (CMU/SEI-2007-TR-008). Software Engineering Institute, Carnegie Mellon University, 2007. http://resources.sei.cmu.edu/library/asset-view.cfm?AssetID=8379

IEEE

Dorofee. Audrey, Killcrece. Georgia, Ruefle. Robin, and Zajicek. Mark, "Incident Management Capability Metrics Version 0.1," Software Engineering Institute, Carnegie Mellon University, Pittsburgh, Pennsylvania, Technical Report CMU/SEI-2007-TR-008, 2007. http://resources.sei.cmu.edu/library/asset-view.cfm?AssetID=8379

APA

Dorofee, Audrey., Killcrece, Georgia., Ruefle, Robin., & Zajicek, Mark. (2007). Incident Management Capability Metrics Version 0.1 (CMU/SEI-2007-TR-008). Retrieved December 20, 2014, from the Software Engineering Institute, Carnegie Mellon University website: http://resources.sei.cmu.edu/library/asset-view.cfm?AssetID=8379

CHI

Audrey Dorofee, Georgia Killcrece, Robin Ruefle, & Mark Zajicek. Incident Management Capability Metrics Version 0.1 (CMU/SEI-2007-TR-008). Pittsburgh, PA: Software Engineering Institute, Carnegie Mellon University, 2007. http://resources.sei.cmu.edu/library/asset-view.cfm?AssetID=8379

MLA

Dorofee, Audrey., Killcrece, Georgia., Ruefle, Robin., & Zajicek, Mark. 2007. Incident Management Capability Metrics Version 0.1 (Technical Report CMU/SEI-2007-TR-008). Pittsburgh: Software Engineering Institute, Carnegie Mellon University. http://resources.sei.cmu.edu/library/asset-view.cfm?AssetID=8379