CERT Resilience Management Model, Version 1.0

owners are responsible for ensuring the proper protection and continuity of their assets, regardlessof the actions (or inactions) of custodians.2.2.4 Resilience RequirementsAn operational resilience requirement is a constraint that the organization places on the productivecapability of a high-value asset to ensure that it remains viable and sustainable when charged intoproduction to support a high-value service. In practice, operational resilience requirements are aderivation of the traditionally described security objectives of confidentiality, integrity, andavailability. Well known as descriptive properties of information assets, these objectives are alsoextensible to other types of assets—people, technology, and facilities—with which operationalresilience management is concerned. For example, in the case of information, if the integrityrequirement is compromised, the information may not be usable in the form intended, thusimpacting associated business processes and services. Correspondingly, if unintended changes aremade to the information (compromise of integrity), these may cause the business process orservice to produce unintended results.Resilience requirements provide the foundation for how assets are protected from threats andmade sustainable so that they can perform as intended in support of services. Resiliencerequirements become a part of an asset’s DNA (just like its definition, owner, and value) thattranscends departmental and organizational boundaries because they stay with the asset regardlessof where it is deployed or operated.As shown in Figure 9, the resilience requirements development process requires the organizationto establish resilience requirements at the enterprise, service, and asset levels based onorganizational drivers, risk assumptions and tolerances, and resilience goals and objectives.Resilience requirements also drive or influence many of the processes that define operationalresilience management. For example, resilience requirements form the basis for protect andsustain strategies. These strategies determine the type and level of controls needed to ensureoperational resilience; conversely, controls must satisfy the requirements from which they derive.25 | CMU/SEI-2010-TR-012