Title :
Improving Operational Resilience Processes: The CERT Resilience Management Model
Author :
Caralli, Richard A. ; Allen, Julia H. ; Curtis, Pamela D. ; White, David W. ; Young, Lisa R.
Author_Institution :
Software Eng. Inst., Carnegie Mellon Univ., Pittsburgh, PA, USA
Abstract :
The CERT® Resilience Management Model (CERT®-RMM) defines processes for managing operational resilience in complex, risk-evolving environments. The model encompasses and integrates activities from security, business continuity, and aspects of IT operations management. It provides a path for making operational resilience a repeatable, predictable, manageable, and improvable process over which an organization has a significant level of active and direct control. This paper describes the operational resilience management foundations of the model and the evolution of the model, and it provides an example of how the model might be used to manage and improve the resilience of information assets.
Keywords :
business continuity; business data processing; information technology; organisational aspects; risk management; CERT resilience management model; IT operations management; operational resilience processes; Business continuity; Organizations; Process control; Resilience; Risk management; Security; enterprise security management; operational resilience; operational risk management; process improvement; resilience; risk management; strategic planning;
Conference_Titel :
Social Computing (SocialCom), 2010 IEEE Second International Conference on
Conference_Location :
Minneapolis, MN
Print_ISBN :
978-1-4244-8439-3
Electronic_ISBN :
978-0-7695-4211-9
DOI :
10.1109/SocialCom.2010.173
