Information Security Handbook - Second Edition

10

Developing an Information Security Architecture Program

This chapter delves into the fundamentals of creating an information security architecture program for an organization. The chapter defines information security architecture before discussing its integration into the system development life cycle (SDLC) or system engineering life cycle (SELC). The chapter then guides you through conducting an initial information security analysis to inform architectural decisions. Then, we explore how to develop a security architecture advisement program that assists in creating a repeatable process for developing secure architectures. Finally, the chapter outlines the overall information security architecture process, which contributes to an organization’s ...