CERT Resilience Management Model, Version 1.0

Appendix A: Generic Goals and PracticesThis document describes the generic goals and practices that the organization deploys to attainsuccessively improving degrees of process institutionalization and capability for operationalresilience management. These practices exhibit the organization’s commitment and ability toperform operational resilience management processes, as well as its ability to measureperformance and verify implementation.Except where otherwise noted, generic goals and practices are applied universally across allprocess areas throughout the CERT Resilience Management Model. In some cases, generic goalsand practices mirror process areas in the model. This occurs because some of the practicescontained in process areas are also useful in improving and sustaining process maturity. Wherethis occurs, there are references to the process area that is reflected in the generic practices.195 | CMU/SEI-2010-TR-012