Advanced Search

Content Type

Topics

Publication Date

An Introduction to the Mission Risk Diagnostic for Incident Management Capabilities (MRD-IMC)

Abstract

An incident management (IM) function is responsible for performing the broad range of activities associated with managing computer security events and incidents. For many years, the Software Engineering Institute's (SEI) CERT Division has developed practices for building and sustaining IM functions in government and industry organizations worldwide. Based on their field experiences over the years, CERT researchers identified a community need for a time-efficient means of assessing an IM function. The Mission Risk Diagnostic for Incident Management Capabilities (MRD-IMC) is designed to address this need. The MRD-IMC is a risk-based approach for assessing the extent to which an IM function is in position to achieve its mission and objectives. Analysts applying the MRD-IMC evaluate a set of systemic risk factors (called drivers) to aggregate decision-making data and provide decision makers with a benchmark of an IM function's current state. The resulting gap between the current and desired states points to specific areas where additional investment is warranted. The MRD-IMC can be viewed as a first-pass screening (i.e., a "health check") or high-level diagnosis of conditions that enable and impede the successful completion of the IM function's mission and objectives. This technical note provides an overview of the MRD-IMC method.

Cite This Report

Show Citation Formats

SEI

Alberts, Christopher; Dorofee, Audrey; Ruefle, Robin; & Zajicek, Mark. An Introduction to the Mission Risk Diagnostic for Incident Management Capabilities (MRD-IMC) (CMU/SEI-2014-TN-005). Software Engineering Institute, Carnegie Mellon University, 2014. http://resources.sei.cmu.edu/library/asset-view.cfm?AssetID=91452

IEEE

Alberts. Christopher, Dorofee. Audrey, Ruefle. Robin, and Zajicek. Mark, "An Introduction to the Mission Risk Diagnostic for Incident Management Capabilities (MRD-IMC)," Software Engineering Institute, Carnegie Mellon University, Pittsburgh, Pennsylvania, Technical Note CMU/SEI-2014-TN-005, 2014. http://resources.sei.cmu.edu/library/asset-view.cfm?AssetID=91452

APA

Alberts, Christopher., Dorofee, Audrey., Ruefle, Robin., & Zajicek, Mark. (2014). An Introduction to the Mission Risk Diagnostic for Incident Management Capabilities (MRD-IMC) (CMU/SEI-2014-TN-005). Retrieved September 01, 2014, from the Software Engineering Institute, Carnegie Mellon University website: http://resources.sei.cmu.edu/library/asset-view.cfm?AssetID=91452

CHI

Christopher Alberts, Audrey Dorofee, Robin Ruefle, & Mark Zajicek. An Introduction to the Mission Risk Diagnostic for Incident Management Capabilities (MRD-IMC) (CMU/SEI-2014-TN-005). Pittsburgh, PA: Software Engineering Institute, Carnegie Mellon University, 2014. http://resources.sei.cmu.edu/library/asset-view.cfm?AssetID=91452

MLA

Alberts, Christopher., Dorofee, Audrey., Ruefle, Robin., & Zajicek, Mark. 2014. An Introduction to the Mission Risk Diagnostic for Incident Management Capabilities (MRD-IMC) (Technical Report CMU/SEI-2014-TN-005). Pittsburgh: Software Engineering Institute, Carnegie Mellon University. http://resources.sei.cmu.edu/library/asset-view.cfm?AssetID=91452