Software Engineering Institute | Carnegie Mellon University
Software Engineering Institute | Carnegie Mellon University

Digital Library

Javascript is currently disabled for your browser. For an optimal search experience, please enable javascript.

Advanced Search

Basic Search

Content Type

Topics

Publication Date

Matthew  J. Butkovic
January 2016 - Article CYBURGH, PA: Using Process to Tame Technology

Topics: Cyber Risk and Resilience Management

Authors: Matthew J. Butkovic

In this teQ Magazine article, Matt Butkovic discusses the role process plays solving today's cybersecurity challenges.

November 2015 - Webinar Resilience Panel Discussion

Topics: Cyber Risk and Resilience Management

Authors: Matthew J. Butkovic, Katie C. Stewart

CERT researchers discuss risk management and resilience.

March 2015 - Podcast Supply Chain Risk Management: Managing Third Party and External Dependency Risk

Topics: Cyber Risk and Resilience Management

Authors: John Haller, Matthew J. Butkovic, Julia H. Allen

In this podcast, Matt Butkovic and John Haller discuss approaches for more effectively managing supply chain risks, focusing on risks arising from “external entities that provide, sustain, or operate Information and Communications Technology (ICT)."

December 2014 - Webinar Lessons in External Dependency and Supply Chain Risk Management

Topics: Cyber Risk and Resilience Management

Authors: John Haller, Matthew J. Butkovic

In this webinar, John Haller and Matthew Butkovic of the CERT Division of the Software Engineering Institute will discuss real-world incidents, including recent industrial control system attacks and incidents affecting Department of Defense capabilities.

June 2014 - Webinar CERT® RMM User Panel Discussion: USPIS, DHS, DoE, SunGard, & Lockheed Martin

Topics: Cyber Risk and Resilience Management, Risk and Opportunity Management

Authors: Matthew J. Butkovic

Watch the CERT® RMM User Panel discuss their experiences implementing RMM from the SEI Virtual Event, CERT® Operational Resilience: Manage, Protect and Sustain

June 2014 - Webinar Department of Homeland Security Cyber Resilience Review (Case Study)

Topics: Cyber Risk and Resilience Management, Risk and Opportunity Management

Authors: Matthew J. Butkovic

Watch Matthew Butkovic discuss the "Department of Homeland Security Cyber Resilience Review (Case Study)" from the SEI Virtual Event, CERT® Operational Resilience: Manage, Protect and Sustain

November 2013 - Podcast Using the Cyber Resilience Review to Help Critical Infrastructures Better Manage Operational Resilience

Topics: Cyber Risk and Resilience Management

Authors: Kevin Dillon (Department of Homeland Security), Matthew J. Butkovic, Julia H. Allen

In this podcast, the presenters explain how CRRs allow critical infrastructure owners to compare their cybersecurity performance with their peers.

November 2013 - Technical Note Advancing Cybersecurity Capability Measurement Using the CERT-RMM Maturity Indicator Level Scale

Topics: Cyber Risk and Resilience Management

Authors: Matthew J. Butkovic, Richard A. Caralli

In this report, the authors review the specific and generic goals and practices in CERT-RMM to determine if a better scale could be developed.

June 2013 - Presentation Cybersecurity SLAs: Managing Requirements at Arm's Length

Topics: Cyber Risk and Resilience Management, Cybersecurity Engineering

Authors: Matthew J. Butkovic

presentation from the June 2013 CERT Symposium on Cyber Security Incident Management for Health Information Exchanges

June 2013 - Video Cyber Security Service Level Agreements

Topics: Cybersecurity Engineering

Authors: Matthew J. Butkovic

In this video, Matthew Butkovic presents information about cyber security service level agreements.

December 2011 - Podcast Considering Security and Privacy in the Move to Electronic Health Records

Authors: Deborah Lafky (Healthcare Information Technology (HIT) Security/Cybersecurity), Matthew J. Butkovic, Julia H. Allen

In this podcast, participants discuss how using electronic health records bring many benefits along with security and privacy challenges.

April 2011 - Technical Report Best Practices for National Cyber Security: Building a National Computer Security Incident Management Capability, Version 2.0

Topics: Incident Management

Authors: John Haller, Samuel A. Merrell, Matthew J. Butkovic, Bradford J. Willke

In this 2011 report, the authors provide insight that interested organizations and governments can use to develop a national incident management capability.

February 2011 - Podcast Conducting Cyber Exercises at the National Level

Topics: Cyber Risk and Resilience Management

Authors: Brett Lambo (U.S. Department of Homeland Security), Matthew J. Butkovic, Julia H. Allen

In this podcast, participants discuss exercises that help organizations, governments, and nations prepare for, identify, and mitigate cyber risks.

June 2010 - Special Report Best Practices for National Cyber Security: Building a National Computer Security Incident Management Capability

Topics: Incident Management

Authors: John Haller, Samuel A. Merrell, Matthew J. Butkovic, Bradford J. Willke

In this report, the authors provide insight that interested organizations and governments can use to develop a national incident management capability.