CERT Resilience Management Model, Version 1.0

Specific Practices by GoalTM:SG1 Establish and Prioritize Technology AssetsTechnology assets are prioritized to ensure the resilience of the high-valueservices that they support.TM:SG1.SP1 Prioritize Technology AssetsTechnology assets are prioritized relative to their importance insupporting the delivery of high-value services.TM:SG1.SP2 Establish Resilience-Focused Technology AssetsTM:SG2 Protect Technology AssetsTechnology assets that specifically support execution of servicecontinuity and service restoration plans are identified andestablished.Administrative, technical, and physical controls for technology assets areidentified, implemented, monitored, and managed.TM:SG2.SP1 Assign Resilience Requirements to Technology AssetsResilience requirements that have been defined are assigned totechnology assets.TM:SG2.SP2 Establish and Implement ControlsTM:SG3 Manage Technology Asset RiskAdministrative, technical, and physical controls that are required tomeet the established resilience requirements are identified andimplemented.Operational risks to technology assets are identified and managed.TM:SG3.SP1 Identify and Assess Technology Asset RiskRisks to technology assets are identified and assessed.TM:SG3.SP2 Mitigate Technology RiskTM:SG4 Manage Technology Asset IntegrityRisk mitigation strategies for technology assets are developed andimplemented.The integrity of technology assets is managed.TM:SG4.SP1 Control Access to Technology AssetsAccess to technology assets is controlled.TM:SG4.SP2 Perform Configuration ManagementThe configuration of technology assets is managed.190 | CMU/SEI-2010-TR-012