CERT Resilience Management Model, Version 1.0

4.1.1 Enterprise ManagementThe enterprise is an important concept in managing operational resilience. At the enterprise level,the organization establishes and carries out many activities that set the tone for operationalresilience, such as governance, risk management, and financial responsibility.The process areas in the Enterprise Management category represent functions and activities thatare essential to broadly supporting the operational resilience management process. This does notmean that these processes are or need to be functionally positioned at an enterprise level. Instead,they represent organization-wide competencies that affect the operational resilience oforganizational units. For example, the practices in the Risk Management process area may beperformed by an organizational unit, but their effectiveness may be limited by the overall riskmanagement capability of the organization.The process areas that represent the Enterprise Management category areCommunications [COMM]Compliance Management [COMP]Enterprise Focus [EF]Financial Resource Management [FRM]Human Resource Management [HRM]Organizational Training and Awareness [OTA]Risk Management [RISK]Figure 21 depicts the relationships that drive resilience activities at the enterprise level.42 | CMU/SEI-2010-TR-012