search menu icon-carat-right cmu-wordmark

Measures for Managing Operational Resilience

Technical Report
In this report, the Resilient Enterprise Management (REM) team suggests a set of top ten strategic measures for managing operational resilience.
Publisher

Software Engineering Institute

CMU/SEI Report Number
CMU/SEI-2011-TR-019
DOI (Digital Object Identifier)
10.1184/R1/6575393.v1

Abstract

How resilient is my organization? Have our processes made us more resilient? Members of the CERT Resilient Enterprise Management (REM) team are conducting research to address these and other related questions. The team’s first report, Measuring Operational Resilience Using the CERT Resilience Management Model, defined high-level objectives for managing an operational resilience management (ORM) system, demonstrated how to derive meaningful measures from those objectives, and presented a template for defining resilience measures, along with example measures. In this report, REM team members suggest a set of top ten strategic measures for managing operational resilience. These measures derive from high-level objectives of the ORM system defined in the CERT Resilience Management Model, Version 1.1 (CERT-RMM). The report also provides measures for each of the 26 process areas of CERT-RMM, as well as a set of global measures that apply to all process areas. This report thus serves as an addendum to CERT-RMM Version 1.1. Since CERT-RMM practices map to bodies of knowledge and codes of practice such as ITIL, COBIT, ISO2700x, BS25999, and PCI DSS, the measures may be useful for measuring security, business continuity, and IT operations management processes, either as part of adoption of CERT-RMM or independent of it.

Related Reading 

Measuring Operational Resilience Using the CERT Resilience Management Model

Using Defined Processes as a Context for Resilience Measures

Supplemental Materials

Cite This Technical Report

Allen, J., & Curtis, P. (2011, July 1). Measures for Managing Operational Resilience. (Technical Report CMU/SEI-2011-TR-019). Retrieved March 4, 2024, from https://doi.org/10.1184/R1/6575393.v1.

@techreport{allen_2011,
author={Allen, Julia and Curtis, Pamela},
title={Measures for Managing Operational Resilience},
month={Jul},
year={2011},
number={CMU/SEI-2011-TR-019},
howpublished={Carnegie Mellon University, Software Engineering Institute's Digital Library},
url={https://doi.org/10.1184/R1/6575393.v1},
note={Accessed: 2024-Mar-4}
}

Allen, Julia, and Pamela Curtis. "Measures for Managing Operational Resilience." (CMU/SEI-2011-TR-019). Carnegie Mellon University, Software Engineering Institute's Digital Library. Software Engineering Institute, July 1, 2011. https://doi.org/10.1184/R1/6575393.v1.

J. Allen, and P. Curtis, "Measures for Managing Operational Resilience," Carnegie Mellon University, Software Engineering Institute's Digital Library. Software Engineering Institute, Technical Report CMU/SEI-2011-TR-019, 1-Jul-2011 [Online]. Available: https://doi.org/10.1184/R1/6575393.v1. [Accessed: 4-Mar-2024].

Allen, Julia, and Pamela Curtis. "Measures for Managing Operational Resilience." (Technical Report CMU/SEI-2011-TR-019). Carnegie Mellon University, Software Engineering Institute's Digital Library, Software Engineering Institute, 1 Jul. 2011. https://doi.org/10.1184/R1/6575393.v1. Accessed 4 Mar. 2024.

Allen, Julia; & Curtis, Pamela. Measures for Managing Operational Resilience. CMU/SEI-2011-TR-019. Software Engineering Institute. 2011. https://doi.org/10.1184/R1/6575393.v1