|
CERT has announced that it is ‘developing tools, techniques, and methodologies that allow organizations to move their security and business continuity activities to the next level by focusing on actively managing operational resiliency to achieve the organization’s mission’.
The cornerstone of CERT’s research work in this area has been the development of the ‘CERT Resiliency Engineering Framework’ (REF). This framework is ‘the foundation for a process improvement approach to security and business continuity’. It establishes an organization’s resiliency engineering process: a collection of essential capabilities that an organization performs to ensure that its important assets—people, information, technology, and facilities—stay productive in supporting business processes and services. The framework ‘serves as a foundation from which an organization can measure its current competency, set improvement targets, and establish plans and actions to close any identified gaps. As a result, the organization repositions and repurposes its security and business continuity activities and takes on a process improvement mindset that helps to keep these activities productive in the long run’.
Through the rest of 2007, CERT will be continuing the development of the Resiliency Engineering Framework and accompanying technologies and methods, including assessment methodologies and training courses. CERT is offering an invitation to businesses to help in any of the following four ways:
* Participate in a CERT-led evaluation of your current resiliency practices
* Engage in a pilot using the framework
* Become a CERT research partner to further develop the model, assessment methods, and training
* Join the REF user’s group—a forum for discussion of process improvement in operational resiliency management.
To become involved in one or more of these activities, please contact Joe McLeod at jmcleod@sei.cmu.edu
http://www.cert.org/resiliency_engineering/

•Date: 9th May 2007 • Region: US •Type: Article •Topic: BC general
Rate this article or make a comment - click here
|