Information Security Handbook

Conducting an initial information security analysis

To properly inform your decision making, as an information security architect in support of a technology project, you must be able to determine what the business and technology-related goals are for the information system being designed.

Establishing a process such as an initial information security analysis at project initiation will allow you, as the information security architect, to gather the necessary information to properly support your project and provide the most relevant guidance possible.

As part of an initial information security analysis, you will want to gather the following information:

• Purpose and description of the information system
• Compliance requirements
• Key information ...