Part Three: CERT-RMM Process Areas

In Part Three, we present the CERT-RMM process areas. Each process area includes the purpose statement, introductory notes, related process areas, and the summary of specific goals and practices. At the specific goals and practices level, extensive supporting information is provided to explain the purpose and intent of the goals and practices, and to introduce and describe underlying concepts. Each process area also includes elaborated generic goals and practices. These elaborations give you suggestions for how to implement the generic goals and practices relative to the subject matter of the process area. These elaborations represent the knowledge and experience of the core model project team, as well as the practical knowledge gained from working with high-functioning organizations.

To facilitate the evolution and calibration of the model, the CERT website will always contain the most current versions of the process areas, as well as new process areas. Please visit this space often to obtain the most up-to-date information about the model.