Software Engineering Institute

CERT Resilience Management Model (CERT-RMM) Collection

February 15, 2016 • Collection

By Software Engineering Institute

CERT-RMM, the foundation for a process improvement approach to operational resilience management, defines the practices needed to manage operational resilience.

Learn More

CERT Resilience Management Model—Mail-Specific Process Areas: International Mail Transportation (Version 1.0)

September 18, 2014 • Technical Note

By Julia H. Allen, Gregory Crabb (United States Postal Service), Pamela D. Curtis, Sam Lin, Nader Mehravari, Dawn Wilkes

This report describes a new process area that ensures that international mail is transported according to Universal Postal Union standards.

Read

CERT Resilience Management Model—Mail-Specific Process Areas: Mail Induction (Version 1.0)

September 18, 2014 • Technical Note

By Julia H. Allen, Gregory Crabb (United States Postal Service), Pamela D. Curtis, Nader Mehravari, David W. White

This report describes a new process area that ensures that mail is inducted into the U.S. domestic mail stream according to USPS standards and requirements.

Read

CERT Resilience Management Model—Mail-Specific Process Areas: Mail Revenue Assurance (Version 1.0)

September 18, 2014 • Technical Note

By Julia H. Allen, Gregory Crabb (United States Postal Service), Pamela D. Curtis, Nader Mehravari, David W. White

This report describes a new process area that ensures that the USPS is compensated for mail that is accepted, transported, and delivered.

Read

CERT® Resilience Management Model (CERT®-RMM) V1.1: NIST Special Publication 800-66 Crosswalk

October 28, 2013 • Technical Note

By Lisa R. Young, Ma-Nyahn Kromah (SunGard Availability Services)

In this report, the authors map CERT-RMM process areas to key activities in NIST Special Publication 800-66 Revision 1.

Read

Advancing Cybersecurity Capability Measurement Using the CERT-RMM Maturity Indicator Level Scale

November 7, 2013 • Technical Note

By Matthew J. Butkovic, Richard A. Caralli

In this report, the authors review the specific and generic goals and practices in CERT-RMM to determine if a better scale could be developed.

Read

CERT® Resilience Management Model (CERT®-RMM) V1.1: NIST Special Publication Crosswalk Version 2

June 11, 2014 • Technical Note

By Kevin G. Partridge, Mary Popeck, Lisa R. Young

This update to Version 1 of this same title (CMU/SEI-2011-TN-028) maps CERT-RMM process areas to certain NIST 800-series special publications.

Read

CERT® Resilience Management Model (CERT®-RMM) V1.1: NIST Special Publication Crosswalk Version 1

October 31, 2011 • Technical Note

By Kevin G. Partridge, Lisa R. Young

In this report, the authors map CERT-RMM process areas to selected NIST special publications in the 800 series.

Read

CERT® Resilience Management Model (RMM) v1.1: Code of Practice Crosswalk Commercial Version 1.1

September 30, 2011 • Technical Note

By Kevin G. Partridge, Lisa R. Young

In this report, the authors explain how CERT-RMM process areas, industry standards, and codes of practice are used by organizations in an operational setting.

Read

CERT® RMM User Panel Discussion: USPIS, DHS, DoE, SunGard, & Lockheed Martin

June 17, 2014 • Webcast

By Matthew J. Butkovic

Watch the CERT® RMM User Panel discuss their experiences implementing RMM from the SEI Virtual Event, CERT® Operational Resilience: Manage, Protect and Sustain

Watch

Integrated, Enterprise-Wide Risk Management: NIST 800-39 and CERT-RMM

March 29, 2011 • Podcast

By Ron Ross (NIST), James J. Cebula, Julia H. Allen

In this podcast, participants explain why and how business leaders must address risk at the enterprise, business process, and system levels.

Listen

Overview of the CERT® Resilience Management Model (CERT®-RMM)

June 16, 2014 • Webcast

By James J. Cebula

Watch James Cebula discuss the "Overview of the CERT® Resilience Management Model" from the SEI Virtual Event, CERT® Operational Resilience: Manage, Protect and Sustain

Watch

Managing Disruptive Events - CERT-RMM Experience Reports

June 11, 2013 • Podcast

By Nader Mehravari, Julia H. Allen

In this podcast, the participants describe four experience reports that demonstrate how the CERT-RMM can be applied to manage operational risks.

Listen

Using CERT-RMM in a Software and System Assurance Context

March 24, 2011 • Presentation

By Julia H. Allen

In this presentation, Julia Allen describes how organizations can employ CERT-RMM immediately to jump-start assurance considerations in early life cycle activities.

Learn More

Resilience Management Through the Use of CERT-RMM and Associated Success Stories

November 13, 2013 • Article

By Nader Mehravari

In this paper, Nader Mehravari shares practical and successful applications of CERT-RMM from a wide variety of organizations.

Read

Report from the First CERT-RMM Users Group Workshop Series

March 31, 2012 • Technical Note

By Julia H. Allen, Lisa R. Young

In this report, the authors describe the first CERT RMM Users Group (RUG) Workshop Series and the experiences of participating members and CERT staff.

Read