O'Reilly logo

The CISA® Prep Guide: Mastering the Certified Information Systems Auditor Exam by John Kramer

Stay ahead with the world's most comprehensive technology and business learning platform.

With Safari, you learn the way you learn best. Get unlimited access to videos, live online training, learning paths, books, tutorials, and more.

Start Free Trial

No credit card required

4.5. Information Security Architecture

Information security architecture is a concept that covers all of the security-related items discussed in this chapter tied into a strategy that is cohesive and considerate of all of the risks and controls. Security architecture has to be a consideration that is integrated with the functionality of an infrastructure during all design phases in order for it to best serve the needs of the business and system users. An evaluation of security architecture will include a review of the risk assessment methodology used to baseline the current state and will analyze the best practices for the business against this current state of the assessment to determine any gaps that need addressing. A security architecture that recognizes the business risks and implements countermeasures, processes, and procedures that provides appropriate controls for those risks is what you will be looking for in this assessment. Documentation of the data classifications, sensitive data locations, and inherent risks should be available to show that the architect understands what it is they are trying to protect. Integration of the various solutions for securing the environment that encompass host-based as well as network-based and application-based controls should be found.

A design process should exist that ensures the chosen tools work well together, compliment each others strengths, and compensate for each other's weaknesses, to provide a security in-depth solution that ...

With Safari, you learn the way you learn best. Get unlimited access to videos, live online training, learning paths, books, interactive tutorials, and more.

Start Free Trial

No credit card required