Advanced Search

Content Type

Topics

Publication Date

Measuring Operational Resilience Using the CERT® Resilience Management Model

Abstract

Measurement involves transforming management decisions, such as strategic direction and policy, into action, and measuring the performance of that action. As organizations strive to improve their ability to effectively manage operational resilience, it is essential that they have an approach for determining what measures best inform the extent to which they are meeting their performance objectives. Operational resilience comprises the disciplines of security, business continuity, and aspects of IT operations. 

The reference model used as the foundation for this research project is the CERT Resilience Management Model v1.0. This model provides a process-based framework of goals and practices at four increasing levels of capability and defines twenty six process areas, each of which includes a set of candidate measures. Meaningful measurement occurs in a context so this approach is further defined by exploring and deriving example measures within the context of selected ecosystems, which are collections of process areas that are required to meet a specific objective. Example measures are defined using a measurement template. This report is the first in a series and is intended to start a dialogue on this important topic.

Related Reading

Measures for Managing Operational Resilience 

Using Defined Processes as a Context for Resilience Measures

Cite This Report

Show Citation Formats

SEI

Allen, Julia; & Davis, Noopur. Measuring Operational Resilience Using the CERT® Resilience Management Model (CMU/SEI-2010-TN-030). Software Engineering Institute, Carnegie Mellon University, 2010. http://resources.sei.cmu.edu/library/asset-view.cfm?AssetID=9401

IEEE

Allen. Julia, and Davis. Noopur, "Measuring Operational Resilience Using the CERT® Resilience Management Model," Software Engineering Institute, Carnegie Mellon University, Pittsburgh, Pennsylvania, Technical Note CMU/SEI-2010-TN-030, 2010. http://resources.sei.cmu.edu/library/asset-view.cfm?AssetID=9401

APA

Allen, Julia., & Davis, Noopur. (2010). Measuring Operational Resilience Using the CERT® Resilience Management Model (CMU/SEI-2010-TN-030). Retrieved September 18, 2014, from the Software Engineering Institute, Carnegie Mellon University website: http://resources.sei.cmu.edu/library/asset-view.cfm?AssetID=9401

CHI

Julia Allen, & Noopur Davis. Measuring Operational Resilience Using the CERT® Resilience Management Model (CMU/SEI-2010-TN-030). Pittsburgh, PA: Software Engineering Institute, Carnegie Mellon University, 2010. http://resources.sei.cmu.edu/library/asset-view.cfm?AssetID=9401

MLA

Allen, Julia., & Davis, Noopur. 2010. Measuring Operational Resilience Using the CERT® Resilience Management Model (Technical Report CMU/SEI-2010-TN-030). Pittsburgh: Software Engineering Institute, Carnegie Mellon University. http://resources.sei.cmu.edu/library/asset-view.cfm?AssetID=9401