CERT Resilience Management Model Capability Appraisal Method (CAM) Version 1.1

Abstract

The CERT Resilience Management Model (CERT-RMM), developed by the CERT Program at Carnegie Mellon University's Software Engineering Institute (SEI), is the result of many years of research and development committed to helping organizations meet the challenge of managing operational risk and resilience in a complex world. In operational terms, resilience is an emergent property of an organization that can continue to carry out its mission after a disruption that does not exceed its operational limit. The ability of an organization to assess its current level of capability using CERT-RMM as the reference model is essential for measuring the current competency of its operational practices, setting improvement targets, and establishing plans and actions to close any gaps. The SEI has developed and maintained the Standard Capability Maturity Model? Integration (CMMI) Appraisal Method for Process Improvement (SCAMPISM) family of appraisal methods from the CMMI product suite. Consultations with the SEI's CMMI program manager indicated that it would be appropriate to extend the pedigree of the SCAMPI family of appraisal methodologies for the CERTRMM Capability Appraisal Method (CAM) Version 1.1. This report demonstrates that the SCAMPI Version 1.2 method can be adapted and applied to CERT-RMM V1.1 as the reference model for a process appraisal.

Open PDF

Document Details

Document Type
Technical Report
Publication Date
Oct 01, 2011
Accession Number
ADA585450

Entities

Organizations

  • Carnegie Mellon University

Tags

Communities of Interest

  • Cyber
  • Engineered Resilient Systems
  • Human Systems

DTIC Thesaurus Topics

  • Business Administration
  • Computers
  • Control Systems
  • Information Systems
  • Intellectual Property
  • Law
  • Lessons Learned
  • Organizational Structure
  • Patient Care
  • Reliability
  • Resilience
  • Resource Management
  • Software Development
  • Spreadsheet Software
  • Standards
  • Systems Engineering
  • Vulnerability

Readers

  • Organizational Process Management (OPM).
  • Software Engineering.