EU Agency Presents the First Report Ever on how to Measure IT Resilience
"If you Cannot Measure, it you Cannot Improve it!" - Lord Kelvin / EU Agency Presents the First Comprehensive Report on Metrics and Measurements in Network and Service Resilience, Uncovering a Lack of Standards&Coherency
(PresseBox) - .2011 - Business and governments are all reliant on secure networks, but how do you measure the resilience of these networks? The European Network and Information Security Agency (ENISA) has published the 'Main Challenges and Recommendations on Network and Service Resilience Metrics' report, as well as a technical report. These are the first ever reports in Europe to address this area's lack of holistic review.
Metrics and a measurement framework are essential to the assessment of practices and policies to improve network and service resilience. The desktop research done by ENISA shows that a) there are very few existing frameworks and not one is globally acceptable; b) there are no standard practices, as different organisations use diverse sets of baseline metrics and frameworks; and c) it is difficult to combine or aggregate diverse frameworks in a high-level assessment.
The main resilience metrics challenges include:
- A lack of standard practices across the industry and public sectors
- Organisations using own-specific approaches and means to measure resilience, if at all;
- Resilience metrics being difficult to deploy, due to lack of knowledge and awareness;
- A lack of analysis, long and active co-operation towards a common understanding and approach;
- The usefulness and value of resilience metrics declining when complexity increases; and
- A lack of tools and solutions.
The key consensus recommendations are:
- To create a common understanding and practice or standard of resilience metrics (Taxonomy, Description and set of baseline metrics, Impact factors);
- To undertake further research on open issues in resilience metrics (Aggregation, Composition, Thresholds, Data Analysis);
- To develop tools and software to automate the deployment of resilience measurements;
- To collect and analyse data;
- To promote good practices and information sharing; and
- To deploy a conservative approach to introducing metrics (i.e. to start with a small set of metrics).
The technical report is a first step towards building a common understanding, good practices and standards for resilience metrics. It holistically reviews the existing frameworks, models, classification of metrics, and baseline metrics.
"It is imperative for Critical Information Infrastructures Protection to be able to accurately measure the security and resilience in Europe ", ," says Prof. Udo Helmbrecht, Executive Director of ENISA.
A new video clip on resilience metrics is available unter http://www.enisa.europa.eu/media/news-pictures.
For background EU framework:
Critical Information Infrastructure Protection (CIIP) Action Plan
http://ec.europa.eu/information_society/policy/nis/strategy/activities/ciip/index_en.htm
Digital Agenda
http://ec.europa.eu/information_society/digital-agenda/index_en.htm
For full papers; http://www.enisa.europa.eu/act/res/other-areas/metrics
" alt="Reservoir Capital Announces Spin-Out of Mineral Exploration Assets">
" alt="African Queen Mines Ltd.: Ghana Mining Commission Extends Term of African Queen´s Noyem-Nyafoman License Setting Stage for 2011 Work Program">
Datum: 28.03.2011 - 01:01 Uhr
Sprache: Deutsch
News-ID 28847
Anzahl Zeichen: 0
contact information:
Town:
Heraklion
Kategorie:
Business News
Diese Pressemitteilung wurde bisher 351 mal aufgerufen.
Die Pressemitteilung mit dem Titel:
"EU Agency Presents the First Report Ever on how to Measure IT Resilience"
steht unter der journalistisch-redaktionellen Verantwortung von
ENISA - European Network and Information Security Agency (Nachricht senden)
Beachten Sie bitte die weiteren Informationen zum Haftungsauschluß (gemäß TMG - TeleMedianGesetz) und dem Datenschutz (gemäß der DSGVO).
