CERT Resilience Management Model, Version 1.0

Figure 15: A Specific Goal and Specific Goal StatementFigure 16 shows a specific practice from the Asset Definition and Management process area withits expected component, the specific practice statement.Figure 16: A Specific Practice and Specific Practice Statement3.3.6 Generic Goals and PracticesGeneric goals are called “generic” because the same goal statement applies to multiple processareas. A generic goal describes the capabilities that must be present to institutionalize theprocesses that implement a process area. A generic goal is a required model component and isused in appraisals to determine whether a process area is satisfied.Figure 17 shows a generic goal from the Asset Definition and Management process area with itsrequired component, the generic goal statement.Figure 17: A Generic Goal and Generic Goal StatementGeneric practices are called “generic” because the same practice applies to multiple process areas.A generic practice is the description of an activity that is considered important in achieving theassociated generic goal. (See Part Two, Chapter 5 for a more detailed description of generic goalsand practices.)Figure 18 shows a generic practice from the Asset Definition and Management process area withits expected component, the generic practice statement.Figure 18: A Generic Practice and Generic Practice Statement35 | CMU/SEI-2010-TR-012