CERT Resilience Management Model, Version 1.0

Organizational Process Definition (OPD)A process management process area in CERT-RMM. The purpose of Organizational ProcessDefinition is to establish and maintain a usable set of organizational process assets and workenvironment standards for operational resilience.Organizational Process Focus (OPF)A process management process area in CERT-RMM. The purpose of Organizational ProcessFocus is to plan, implement, and deploy organizational process improvements based on athorough understanding of current strengths and weaknesses of the organization’s operationalresilience processes and process assets.Organizational process maturityIn models with a staged representation, organizational process maturity is measured by the degreeof process improvement across predefined sets of process areas. Since CERT-RMM does not havea staged representation, characterization of organizational process maturity can only be implied byreaching successively higher levels of capability across CERT-RMM process areas.Organizational scopeThe part of the organization that is the focus of the CERT-RMM deployment.Organizational sensitivityThe degree to which access to an information asset must be limited due to confidentiality orprivacy requirements. [ADM]Organizational Training and Awareness (OTA)An enterprise process area in CERT-RMM. The purpose of Organizational Training andAwareness is to promote awareness and develop skills and knowledge of people in support oftheir roles in attaining and sustaining operational resilience.Organizational subunitAny sub-element of the organizational unit. An organizational subunit is fully contained withinthe organizational unit.Organizational superunitAny part of the organization that is at a higher level than the organizational unit. Organizationalsuperunit can also be used to refer to the entire organization.Organizational unitA distinct subset of an organization or enterprise. An organizational unit is typically part of alarger organization, although in a small organization the organizational unit may be the wholeorganization.Organizationally high-value servicesServices on which the success of the organization’s mission is dependent. [RRD] [EF]228 | CMU/SEI-2010-TR-012