CERT Resilience Management Model, Version 1.0

ORGANIZATIONAL PROCESS DEFINITIONProcessPurposeThe purpose of Organizational Process Definition (OPD) is to establish and maintain ausable set of organizational process assets and work environment standards for operationalresilience.Introductory NotesOrganizational process assets enable consistent resilience management processperformance across the organization and provide a basis for cumulative, long-term benefitsto the organization. (See the definition of “organizational process assets” in the glossary.)The organization’s process asset library is a collection of items maintained by theorganization for use by the people and organizational units of the organization. Thiscollection of items includes descriptions of processes and process elements, descriptions oflife-cycle models, process tailoring guidelines, process-related documentation, and data. Theorganization’s process asset library supports organizational learning and processimprovement by allowing the sharing of best practices and lessons learned across theorganization.The organization’s set of standard processes is tailored by organizational units to create theirdefined processes. The other organizational process assets are used to support tailoring andthe implementation of the defined processes. The work environment standards are used toguide creation of organizational unit work environments.A standard process is composed of other processes (i.e., subprocesses) or processelements. A process element is the fundamental (e.g., atomic) unit of process definition anddescribes the activities and tasks to consistently perform work. Process architecture providesrules for connecting the process elements of a standard process. The organization’s set ofstandard processes may include multiple process architectures.(See the definitions of “standard process,” “process architecture,” “subprocess,” and“process element” in the glossary.)The organizational process assets may be organized in many ways, depending on theimplementation of the Organizational Process Definition process area. Examples include thefollowing:The organization’s set of standard processes may be stored in the organization’sprocess asset library, or they may be stored separately.A single repository may contain both the measurements and the process-relateddocumentation, or they may be stored separately.155 | CMU/SEI-2010-TR-012