CERT Resilience Management Model Capability Appraisal Method (CAM) Version 1.1.

摘要

The CERT Resilience Management Model (CERT-RMM), developed by the CERT Program at Carnegie Mellon University's Software Engineering Institute (SEI), is the result of many years of research and development committed to helping organizations meet the challenge of managing operational risk and resilience in a complex world. In operational terms, resilience is an emergent property of an organization that can continue to carry out its mission after a disruption that does not exceed its operational limit. The ability of an organization to assess its current level of capability using CERT-RMM as the reference model is essential for measuring the current competency of its operational practices, setting improvement targets, and establishing plans and actions to close any gaps. The SEI has developed and maintained the Standard Capability Maturity Model. Integration (CMMI) Appraisal Method for Process Improvement (SCAMPISM) family of appraisal methods from the CMMI product suite. Consultations with the SEI's CMMI program manager indicated that it would be appropriate to extend the pedigree of the SCAMPI family of appraisal methodologies for the CERTRMM Capability Appraisal Method (CAM) Version 1.1. This report demonstrates that the SCAMPI Version 1.2 method can be adapted and applied to CERT-RMM V1.1 as the reference model for a process appraisal.