Accession Number:

ADA443742

Title:

The Critical Success Factor Method: Establishing a Foundation for Enterprise Security Management

Descriptive Note:

Final rept.

Corporate Author:

CARNEGIE-MELLON UNIV PITTSBURGH PA SOFTWARE ENGINEERING INST

Report Date:

2004-07-01

Pagination or Media Count:

134.0

Abstract:

Every organization has a mission that describes why it exists its purpose and where it intends to go its direction. The mission reflects the organizations unique values and vision. Achieving the mission takes the participation and skill of the entire organization. The goals and objectives of every staff member must be aimed toward the mission. However, achieving goals and objectives is not enough. The organization must perform well in key areas on a consistent basis to achieve the mission. These key areas unique to the organization and the industry in which it competes can be defined as the organizations critical success factors. The critical success factor CSF method is a means for identifying these important elements of success. It was originally developed to align information technology planning with the strategic direction of an organization. However, in research and fieldwork undertaken by members of the Survivable Enterprise Management SEM team at the Software Engineering Institute, it has shown promise in helping organizations guide, direct, and prioritize their activities for developing security strategies and managing security across their enterprises. This report describes the critical success factor method and presents the SEM teams theories and experience in applying it to enterprise security management.

Subject Categories:

  • Administration and Management
  • Information Science
  • Computer Systems Management and Standards

Distribution Statement:

APPROVED FOR PUBLIC RELEASE