CERT Resilience Management Model, Version 1.0

Asset Resilience ManagementEnvironmental Control [EC]Knowledge and Information Management [KIM]People Management [PM]Technology Management [TM]Figure 22 depicts the relationships that drive threat and incident management.Figure 22: Relationships That Drive Threat and Incident ManagementProcess ManagementProcess Management processes represent those that are focused on measuring, managing, andimproving the operational resilience management process. These process areas represent theextension of process improvement concepts to operational resilience management and, in turn, tothe disciplines of security and business continuity. Process areas in this category are intended tocatalyze the organization’s view of resilience as a repeatable, predictable, manageable, andimprovable process over which it has a significant level of active and direct control.Process Management process areas can be expressed by two broad categories:45 | CMU/SEI-2010-TR-012