search menu icon-carat-right cmu-wordmark

A Targeted Improvement Plan for Service Continuity

Technical Note
Describes how an organization can leverage the results of a Cyber Resilience Review to create a Targeted Improvement Plan for its service continuity management.
Publisher

Software Engineering Institute

CMU/SEI Report Number
CMU/SEI-2019-TN-002
DOI (Digital Object Identifier)
10.1184/R1/12363797.v1

Abstract

This technical note describes how an organization can leverage the results of a Cyber Resilience Review to create a Targeted Improvement Plan for its service continuity management (SCM). An organization can use the Cyber Resilience Review (CRR) results and prioritize SCM-specific and supporting practices using a SCM improvement profile to develop a long-term plan. The suggested Targeted Improvement Plan (TIP) approach engages the organization’s business continuity professionals, information technology operations management staff, and security management team (physical and cyber) to create a resilient organization. (In some organizations, it will be appropriate to engage the operational technology team as well.) The technical note includes a SCM Improvement Template that prioritizes all the CRR practices; it places a higher priority on those practices that enable service continuity. It describes how an organization can integrate the results of a recent CRR to create a prioritized list of practices the organization should consider implementing. This list informs decisions that take into account the organization’s unique risk environment to develop a plan. This approach to developing and implementing a SCM program supports organization-specific, mission-focused objectives to protect and sustain a critical, cyber-dependent service during times of stress.

Cite This Technical Note

Hoover, A., Jurecko, G., Pinckard, J., Vrtis, R., & Scolieri, P. (2019, April 8). A Targeted Improvement Plan for Service Continuity. (Technical Note CMU/SEI-2019-TN-002). Retrieved May 18, 2024, from https://doi.org/10.1184/R1/12363797.v1.

@techreport{hoover_2019,
author={Hoover, Andrew and Jurecko, Gavin and Pinckard, Jeffrey and Vrtis, Robert and Scolieri, Philip},
title={A Targeted Improvement Plan for Service Continuity},
month={Apr},
year={2019},
number={CMU/SEI-2019-TN-002},
howpublished={Carnegie Mellon University, Software Engineering Institute's Digital Library},
url={https://doi.org/10.1184/R1/12363797.v1},
note={Accessed: 2024-May-18}
}

Hoover, Andrew, Gavin Jurecko, Jeffrey Pinckard, Robert Vrtis, and Philip Scolieri. "A Targeted Improvement Plan for Service Continuity." (CMU/SEI-2019-TN-002). Carnegie Mellon University, Software Engineering Institute's Digital Library. Software Engineering Institute, April 8, 2019. https://doi.org/10.1184/R1/12363797.v1.

A. Hoover, G. Jurecko, J. Pinckard, R. Vrtis, and P. Scolieri, "A Targeted Improvement Plan for Service Continuity," Carnegie Mellon University, Software Engineering Institute's Digital Library. Software Engineering Institute, Technical Note CMU/SEI-2019-TN-002, 8-Apr-2019 [Online]. Available: https://doi.org/10.1184/R1/12363797.v1. [Accessed: 18-May-2024].

Hoover, Andrew, Gavin Jurecko, Jeffrey Pinckard, Robert Vrtis, and Philip Scolieri. "A Targeted Improvement Plan for Service Continuity." (Technical Note CMU/SEI-2019-TN-002). Carnegie Mellon University, Software Engineering Institute's Digital Library, Software Engineering Institute, 8 Apr. 2019. https://doi.org/10.1184/R1/12363797.v1. Accessed 18 May. 2024.

Hoover, Andrew; Jurecko, Gavin; Pinckard, Jeffrey; Vrtis, Robert; & Scolieri, Philip. A Targeted Improvement Plan for Service Continuity. CMU/SEI-2019-TN-002. Software Engineering Institute. 2019. https://doi.org/10.1184/R1/12363797.v1