CERT Resilience Management Model, Version 1.0

Subpractices1. Identify process stakeholders and their appropriate involvement.Elaboration:These are examples of stakeholders of the asset definition and management process: asset owners and custodians service owners organizational unit and line of business managers responsible for high-valueassets and the services they support staff responsible for establishing, implementing, and maintaining an internal controlsystem for assets external entities responsible for managing high-value assets human resources (for people assets) information technology staff (for technology assets) staff responsible for physical security (for facility assets) internal and external auditorsStakeholders are involved in various tasks in the asset definition and managementprocess, such as planning for the process creating an asset inventory baseline creating asset profiles associating assets with services and analyzing asset-service dependencies managing changes to assets and to the asset inventory reviewing and appraising the effectiveness of process activities resolving issues in the process2. Communicate the list of stakeholders to planners and thoseresponsible for process performance.3. Involve relevant stakeholders in the process as planned.100 | CMU/SEI-2010-TR-012