Information Security Handbook

Example information security architecture process

The following process provides an example of how to tie many of the concepts discussed in this chapter and in this book into an integrated information security architecture process that compliments an organization's SDLC/SELC process:

Task	Responsible party	Audience	SDLC phase
Request security architect	Project manager	Information security program	Initiation
Assignment of security architect	CISO/IT security manager	Information security program	Initiation
Contact project manager / team lead	Security architect	Project manager/ team lead	Initiation
Conduct meeting to kick off security architecture engagement	Security architect	Project manager / ...