book

Practical Cybersecurity Architecture

Name: Practical Cybersecurity Architecture
ISBN: 9781838989927

by Ed Moyle, Diana Kelley

November 2020

Intermediate to advanced

418 pages

12h 7m

English

Packt Publishing

Read now

Unlock full access

Practical Cybersecurity Architecture
Why subscribe?ContributorsAbout the authorsAbout the reviewerPackt is searching for authors like you
Preface
Who this book is forWhat this book coversTo get the most out of this bookDownload the color imagesConventions usedGet in touchReviews
Section 1:Security Architecture
Chapter 1: What is Cybersecurity Architecture?
Understanding the need for cybersecurityWhat is cybersecurity architecture?Network versus application security architectureThe role of the architectSecure network architecturesSecure application architecturesArchitecture, security standards, and frameworksArchitecture frameworksSecurity guidance and standardsSecurity architecture frameworksArchitecture roles and processesRolesProcess overviewKey tasks and milestonesSummary
Chapter 2: The Core of Solution Building
Terminology Understanding solution buildingEstablishing the context for designsUnderstanding goalsIdentifying business goalsDimensions of successStructures and documentsPolicies, procedures, and standardsApplying to architectural frameworksRisk management and complianceRisk management and appetiteComplianceEstablishing a guiding processUnderstanding the business high-level goalsUnderstanding the technology goalsDrawing implied goals from existing documentationCapturing (or defining) risk tolerancesAccounting for compliance requirementsSummary
Section 2: Building an Architecture
Chapter 3: Building an Architecture – Scope and Requirements
Understanding scopeWhat's in this chapter?Setting architectural scopeEnterprise security architectureApplication security architectureDefining scope boundariesScope – enterprise securityExisting capabilityRisk managementStrategic planningScope – application securityThe development and release processComponents, services, and design patternsTeam/organizational boundariesTechnology considerationsThe process for setting scopeConsider high-level goalsReview contextual or other constraintsSet the initial scopeValidate and refine the initial scopeSummary
Chapter 4: Building an Architecture – Your Toolbox
Introduction to the architect's toolboxPlanning toolsAnalytical tools Informational tools Modeling and design toolsBuilding blocks of secure designInformation security policiesOrganization of information securityHuman resources securityAsset managementAccess controlCryptographyPhysical and environmental securityOperations securityCommunications securitySystem acquisition, development, and maintenanceSupplier relationshipsInformation security incident managementInformation security aspects of business continuity managementComplianceSummary
Chapter 5: Building an Architecture – Developing Enterprise Blueprints
RequirementsBlueprintsProcessWhy ADM?The visionEstablishing architectural principlesSet ScopeDesired future (target) stateCreating a programDiscovery, identification, and validationDocumenting your high-level approachCreating the roadmapArchitecture definitionAccompanying documentationSummary
Chapter 6: Building an Architecture – Application Blueprints
Application design considerationsLife cycle modelsEnvironmentConsiderations for Waterfall projectsRequirements phaseDesign phaseImplementation phaseVerification phaseMaintenance phaseConsiderations for Agile projectsConception phaseInception phaseConstruction phaseRelease phaseProduction phaseRetirement phaseConsiderations for DevOps projectsDevelopBuildUnit testDeploy (integrate)Quality assuranceProductionValidateProcess for application security designSystems security engineeringArchitecture definition processArchitecture definitionDocumentationValidationModifying the SDLC and development processesSummary

Section 3:Execution
Chapter 7: Execution – Applying Architecture Models
Process stepsTechnical designWhat specific product do we buy to do this?Where do we place VPN concentrators or access points?What client software do users require?Creating technical implementation strategiesAssess constraints, synergies, and areas of opportunityValidating against likely threat paths and creating a skeleton solution documentValidating implementation strategiesFinalizing the documentationOperational integrationChanging context and evolutionExecution monitoringTelemetrySelecting strategic metricsSelecting operational metrics Summary
Chapter 8: Execution – Future-Proofing
Overcoming obstacles in project executionScope and requirementsSupport failure and organizational issuesResource shortfallsCommunication failureTechnical and environmental issuesFuture-proofing designsEstablishing a 'virtuous cycle'Monitoring our own environment for changesMonitoring for external changesSummary
Chapter 9: Putting It All Together
Virtuous cyclesAdapting architectural processesTips and tricksHone your ability to listenCultivate empathyHave just enough processWhen in doubt, over-communicateBe ready to walk awayGotchasBe aware of (but don't play) politicsDon't shirk the preparationStay engaged until the endUse a multi-disciplinary approachSummary
Other Books You May Enjoy
Leave a review - let other readers know what you think

Content preview from Practical Cybersecurity Architecture

Chapter 4: Building an Architecture – Your Toolbox

In this chapter, we will introduce you to some of the tools that you can put into your toolbox as you prepare to undertake the design process. These are the tools that an architect can employ to plan, test, and validate their strategy and vision for securing their organization. We'll look in detail at analytical, telemetric, strategic, and other tools that we can employ as part of the creation and validation of a security design, as well as work through how a hypothetical organization might employ these tools as we move deeper into the planning process.

The purpose of us introducing this now is twofold. First, the scope that you selected in the previous chapter provides a solid starting point ...

Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.

Read now

Unlock full access

More than 5,000 organizations count on O’Reilly

O’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.

Julian F.

Head of Cybersecurity

I wanted to learn C and C++, but it didn't click for me until I picked up an O'Reilly book. When I went on the O’Reilly platform, I was astonished to find all the books there, plus live events and sandboxes so you could play around with the technology.

Addison B.

Field Engineer

I’ve been on the O’Reilly platform for more than eight years. I use a couple of learning platforms, but I'm on O'Reilly more than anybody else. When you're there, you start learning. I'm never disappointed.

Amir M.

Data Platform Tech Lead

I'm always learning. So when I got on to O'Reilly, I was like a kid in a candy store. There are playlists. There are answers. There's on-demand training. It's worth its weight in gold, in terms of what it allows me to do.

Mark W.

Embedded Software Engineer

Practical Cybersecurity Architecture - Second Edition

Publisher Resources

ISBN: 9781838989927

Cloud Computing

Data Engineering

Data Science

AI & ML

Programming Languages

Software Architecture

IT/Ops

Security

Design

Business

Soft Skills

Practical Cybersecurity Architecture

by Ed Moyle, Diana Kelley

Chapter 4: Building an Architecture – Your Toolbox

Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.