Incident Management Mission Diagnostic Method, Version 1.0 - Cert

SUCCESS CRITERIA
Not all stakeholders will be able to articulate what constitutes success
for the IMC. Some stakeholders may be able to use the definitions for
potential for success and success threshold (see activity A5 Establish
the IMC success profile) and state their goals for the IMC. Others may
only be able to state some specific goals, such as timely and effective
management of incidents or high customer satisfaction. Still others
may not have any input at all, other than having a secure infrastructure.
The analysis team should gather whatever information they can from
stakeholders about success at this point for use later on. Possible
success criteria are the following:
• IMC does not exceed its budget.
• IMC meets required response times for incident management
activities.
• Constituents are satisfied with the IMC.
• IMC should be a center of excellence.
• All intrusions should be detected within a reasonable amount of
time.
• No significant damage to constituent systems or data should occur
from any incident.
32 | CMU/SEI-2008-TR-007