Digital Library
Measuring Operational Resilience Using the CERT® Resilience Management Model
- September 2010
- In this 2010 report, the authors begin a dialogue and establish a foundation for measuring and analyzing operational resilience.
- Cyber Risk and Resilience Management Measurement and Analysis
-
Publisher: Software Engineering Institute
CMU/SEI Report Number: CMU/SEI-2010-TN-030
-
Abstract
Measurement involves transforming management decisions, such as strategic direction and policy, into action, and measuring the performance of that action. As organizations strive to improve their ability to effectively manage operational resilience, it is essential that they have an approach for determining what measures best inform the extent to which they are meeting their performance objectives. Operational resilience comprises the disciplines of security, business continuity, and aspects of IT operations.
The reference model used as the foundation for this research project is the CERT Resilience Management Model v1.0. This model provides a process-based framework of goals and practices at four increasing levels of capability and defines twenty six process areas, each of which includes a set of candidate measures. Meaningful measurement occurs in a context so this approach is further defined by exploring and deriving example measures within the context of selected ecosystems, which are collections of process areas that are required to meet a specific objective. Example measures are defined using a measurement template. This report is the first in a series and is intended to start a dialogue on this important topic.
Related Reading
Measures for Managing Operational Resilience
Using Defined Processes as a Context for Resilience Measures
- Download
Cite This Report
SEI
Allen, Julia; & Davis, Noopur. Measuring Operational Resilience Using the CERT® Resilience Management Model. CMU/SEI-2010-TN-030. Software Engineering Institute, Carnegie Mellon University. 2010. http://resources.sei.cmu.edu/library/asset-view.cfm?AssetID=9401
IEEE
Allen. Julia, and Davis. Noopur, "Measuring Operational Resilience Using the CERT® Resilience Management Model," Software Engineering Institute, Carnegie Mellon University, Pittsburgh, Pennsylvania, Technical Note CMU/SEI-2010-TN-030, 2010. http://resources.sei.cmu.edu/library/asset-view.cfm?AssetID=9401
APA
Allen, Julia., & Davis, Noopur. (2010). Measuring Operational Resilience Using the CERT® Resilience Management Model (CMU/SEI-2010-TN-030). Retrieved April 20, 2018, from the Software Engineering Institute, Carnegie Mellon University website: http://resources.sei.cmu.edu/library/asset-view.cfm?AssetID=9401
CHI
Julia Allen, & Noopur Davis. Measuring Operational Resilience Using the CERT® Resilience Management Model (CMU/SEI-2010-TN-030). Pittsburgh, PA: Software Engineering Institute, Carnegie Mellon University, 2010. http://resources.sei.cmu.edu/library/asset-view.cfm?AssetID=9401
MLA
Allen, Julia., & Davis, Noopur. 2010. Measuring Operational Resilience Using the CERT® Resilience Management Model (Technical Report CMU/SEI-2010-TN-030). Pittsburgh: Software Engineering Institute, Carnegie Mellon University. http://resources.sei.cmu.edu/library/asset-view.cfm?AssetID=9401
BibTex
@techreport{AllenMeasuringOperational2010,
title={Measuring Operational Resilience Using the CERT® Resilience Management Model},
author={Julia Allen and Noopur Davis},
year={2010},
number={CMU/SEI-2010-TN-030},
institution={Software Engineering Institute, Carnegie Mellon University},
address={Pittsburgh, PA},
url={http://resources.sei.cmu.edu/library/asset-view.cfm?AssetID=9401}
}