Improving operational resilience processes: The CERT® resilience management model

Proceedings - SocialCom 2010: 2nd IEEE International Conference on Social Computing, PASSAT 2010: 2nd IEEE International Conference on Privacy, Security, Risk and Trust

Volumn , Issue , 2010, Pages 1165-1170

  Caralli, Richard A ^a   Curtis, Pamela D ^b   Allen, Julia H ^b   White, David W ^b   Young, Lisa R ^b  

^a CARNEGIE MELLON UNIVERSITY   (United States)

^b NONE

Author keywords

Enterprise security management; Operational resilience; Operational risk management; Process improvement; Resilience; Risk management; Strategic planning

Indexed keywords

ENTERPRISE SECURITY-MANAGEMENT; OPERATIONAL RESILIENCE; OPERATIONAL RISKS; PROCESS IMPROVEMENT; RESILIENCE;

INDUSTRIAL MANAGEMENT; RISK MANAGEMENT; STRATEGIC PLANNING;

RISK ANALYSIS;

EID: 78649267326     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/SocialCom.2010.173     Document Type: Conference Paper

References (9)

1. R. A. Caralli, J. H. Allen, P. D. Curtis, D. W. White, and L. R. Young, "CERT® Resilience Management Model, Version 1.0," Carnegie Mellon Univ., Software Engineering Inst., Pittsburgh, PA, Tech. Rpt. CMU/SEI-2010-TR-012, 2010. [Online]. http://www.cert.org/resilience/rmm.html
2. R. A. Caralli, "Sustaining Operational Resiliency: A Process Improvement Approach to Security Management," Carnegie Mellon Univ., Software Engineering Inst., Pittsburgh, PA, Tech. Note CMU/SEI-2006-TN-009, 2006. [Online]. http://www.sei.cmu.edu/library/abstracts/reports/06tn009.cfm
3. C. J. Alberts, S. G. Behrens, R. D. Pethia, and W. Wilson, "Operationally Critical Threat, Asset, and Vulnerability Evaluation (OCTAVE) Framework, Version 1.0," Carnegie Mellon Univ., Software Engineering Inst., Pittsburgh, PA, Tech. Rpt. CMU/SEI-99-TR-017, 1999. [Online]. http://www.sei.cmu.edu/library/abstracts/reports/99tr017.cfm
4. R. A. Caralli, "Managing for Enterprise Security," Carnegie Mellon Univ., Software Engineering Inst., Pittsburgh, PA, Tech. Note CMU/SEI-2004-TN-046, 2004. [Online] http://www.sei.cmu.edu/library/abstracts/ reports/04tn046.cfm
5. Resiliency Engineering Framework Team, "CERT Resiliency Engineering Framework: Code of Practice Crosswalk, Preview Version, v0.95R," Carnegie Mellon Univ., Software Engineering Inst., Pittsburgh, PA, 2008. [Online]. http://www.cert.org/resilience/rmm-materials.html
6. Resiliency Engineering Framework Team, "CERT Resiliency Engineering Framework," Carnegie Mellon Univ., Software Engineering Inst., Pittsburgh, PA, 2008. [Online]. http://www.cert.org/resilience/rmm-materials.html
7. Mark C. Paulk, Charles V. Weber, Bill Curtis, and Mary Beth Chrissis, "The Capability Maturity Model: Guidelines for Improving the Software Process," Addison-Wesley Professional, 1994.
8. CMMI Product Team, "CMMI for Development, Version 1.2," Carnegie Mellon Univ., Software Engineering Inst., Pittsburgh, PA, Tech Rpt. CMU/SEI-2006-TR-008, 2006. [Online] http://www.sei.cmu.edu/library/abstracts/ reports/06tr008.cfm
9. CMMI Product Team, "CMMI for Services, Version 1.2," Carnegie Mellon Univ., Software Engineering Inst., Pittsburgh, PA, Tech. Rpt. CMU/SEI-2009-TR-001, 2009. [Online] http://www.sei.cmu.edu/library/abstracts/ reports/09tr001.cfm