CERT Resilience Management Model, Version 1.0

Part Three:CERT-RMM Process AreasIn Part Three, we present the CERT-RMM process areas. To limit the length of this technicalreport, the process areas are presented in outline form (with one exception as noted below). Foreach process area, the outline form includes full versions of the purpose statement, introductorynotes, related process areas, and the summary of specific goals and practices. At the specific goalsand practices level, only the goal and practice names and the goal and practice statements areprovided. The remainder of informative material, including explanations, notes, elaborations,subpractices, and typical work products, are available for download by process area atwww.cert.org/resilience.In addition, the elaborated generic goals and practices for each process area are excluded from thisdocument. Process areas posted on the website include elaborated generic goals and practices thatcan be used to help you improve performance.In Part Three, the Asset Definition and Management process area is provided in its entirety as anexample. This will give you a sense of what is contained in a process area and the level of detailyou can expect if you download the additional process areas from the website. This process areaincludes elaborated generic goals and practices.To facilitate the evolution and calibration of the model, the CERT website will always contain themost current versions of the process areas, as well as new process areas. Please visit this spaceoften to obtain the most up-to-date information about the model.78 | CMU/SEI-2010-TR-012