book

Enterprise Security Architecture

by Nicholas Sherwood

November 2005

Intermediate to advanced

608 pages

20h 59m

English

CRC Press

Read now

Unlock full access

BenefitsThe Evolution of Information SecurityInformation Security LiteratureHow to Use This BookAbout the SABSA® ModelRelationship to Other Methods, Models and StandardsAnd Finally...
Security Architecture

The Cultural Legacy: Business PreventionMeasuring and Prioritising Business RiskInformation Security as the Enabler of BusinessAdding Value to the Core ProductEmpowering the CustomersProtecting Relationships and Leveraging TrustTo Summarise: What Does ‘Security’ Mean?
The Origins of ArchitectureManaging ComplexityInformation Systems ArchitectureEnterprise Security ArchitectureWhy Architectures Sometimes Fail to Deliver Benefit – and How to Avoid that FateSecurity Architecture Needs a Holistic ApproachTo Summarise: What Does Architecture Mean?
The SABSA® ModelThe Architect’s ViewThe Designer’s ViewThe Builder’s ViewThe Tradesman’s ViewThe Facilities Manager’s ViewThe Inspector’s ViewThe SABSA® MatrixDetailed SABSA® Matrix for the Operational LayerTo Summarise: The Security Architecture Model
Intergalactic Banking and Financial Services IncInterviews at IBFSTo Summarise: IBFS Inc
The Role of Systems EngineeringWhy a Systems Approach?What Does the Systems Approach Make You Do?The Need for Systems Engineering in Security ArchitecturesSome Basic ConceptsThe Control System ConceptUsing the Systems Approach in Security ArchitectureCase StudyAdvanced Modelling TechniquesTo Summarise: A Systems Approach
What Is Meant by ‘Return on Investment’?Why Do You Need Metrics?The Security Management DashboardThe Balanced Scorecard ApproachBusiness Drivers and TraceabilityBusiness Attributes and MetricsSetting Up a Metrics FrameworkMaturity Models Applied to Security Architecture
Using the SABSA® Model to Define a Development ProcessStrategy and Concept PhaseDesign PhaseImplementation PhaseManage and Measure PhaseTo Summarise: How to Use This Book as a Practical Guide
Selling the Benefits of Security ArchitectureGetting Sponsorship and BudgetBuilding the TeamGetting Started: Fast Track™ WorkshopsProgramme Planning and ManagementCollecting the Information You NeedGetting Consensus on the Conceptual ArchitectureArchitecture Governance and ComplianceArchitecture MaintenanceLong-Term Confidence of Senior ManagementTo Summarise: Managing the Security Architecture Programme
Strategy and PlanningContextual Security ArchitectureConceptual Security Architecture
Business Needs for Information SecuritySecurity As a Business EnablerDigital BusinessOperational Continuity and StabilitySafety-Critical DependenciesBusiness Goals, Success Factors and Operational RisksOperational Risk AssessmentBusiness Processes and Their Need for SecurityOrganisation and Relationships Affecting Business Security-NeedsLocation Dependence of Business Security NeedsTime Dependency of Business Security NeedsTo Summarise: Contextual Security Architecture
Conceptual ThinkingBusiness Attributes ProfileControl ObjectivesSecurity Strategies and Architectural LayeringSecurity Entity Model and Trust FrameworkSecurity Domain ModelSecurity Lifetimes and DeadlinesAssessing the Current State of your Security ArchitectureTo Summarise: Conceptual Security Architecture
DesignLogical Security ArchitecturePhysical Security ArchitectureComponent Security Architecture
Business Information ModelSecurity PoliciesSecurity ServicesApplication and System Security ServicesSecurity Management ServicesEntity Schema and Privilege ProfilesSecurity Domain Definitions and AssociationsSecurity Processing CycleSecurity Improvements ProgrammeTo Summarise: Logical Security Architecture
Business Data ModelSecurity Rules, Practices and ProceduresSecurity MechanismsUser and Application SecurityPlatform and Network Infrastructure SecurityControl Structure ExecutionTo Summarise: Physical Security Architecture
Detailed Data StructuresSecurity StandardsSecurity Products and ToolsIdentities, Functions, Actions and ACLsProcesses, Nodes, Addresses and ProtocolsSecurity Step-Timing and SequencingTo Summarise: Component Security Architecture
OperationsOperational Security ArchitectureStyle of Part 4
The Meaning of Security PolicyStructuring the Content of a Security PolicyPolicy Hierarchy and ArchitectureCorporate Security PolicyPolicy PrinciplesInformation ClassificationSystem ClassificationCA and RA Security PoliciesApplication System Security PoliciesPlatform Security PoliciesNetwork Security PoliciesOther Infrastructure Security PoliciesSecurity Organisation and ResponsibilitiesSecurity Culture DevelopmentOutsourcing Strategy and Policy ManagementTo Summarise:
Introduction to Operational Risk ManagementRegulatory Drivers for Operational Risk ManagementThe Complexity of Operational Risk ManagementApproaches to Risk AssessmentManaging Operational RiskRisk MitigationRisk-Based Security ReviewsRisk FinancingThe Risk Management DashboardTo Summarise:
Assurance of Operational ContinuityOrganisational Security AuditsSystem Security AuditsSystem Assurance StrategyFunctional TestingPenetration TestingTo Summarise:
Introduction to Security Management and AdministrationManaging the PeopleManaging Physical and Environmental SecurityManaging ICT Operations and SupportAccess Control ManagementCompliance ManagementSecurity-Specific OperationsManaged Security ServicesProduct Evaluation and SelectionBusiness Continuity ManagementTo Summarise:

Overview

Security is too important to be left in the hands of just one department or employee-it's a concern of an entire enterprise. Enterprise Security Architecture shows that having a comprehensive plan requires more than the purchase of security software-it requires a framework for developing and maintaining a system that is proactive. The book is based