Practical Cybersecurity Architecture

Chapter 9: Putting It All Together

"At the core of architecture, I think there's two fundamental principles. First, there is architecture as a philosophy of how you think about a [security] function (a core component within an organization) in a way that understands and interprets the requirements for what it needs to perform. The second is the ability to communicate why that function is important. Using the example of a physical building, the architecture describes the safety aspects of why you need to build something in a particular way; for example, the assumptions of why having x number of bolts in a certain place makes the building more safe. It's the same with security: if you understand the business you are in, and what safety means in ...