Introduction to Enterprise Security Architecture

A series of flashcards covering key concepts related to Enterprise Security Architecture.

Enterprise Security Architecture

Defines the information security strategy that consists of layers of policy, standards, and procedures linked across an enterprise.

Architecture

The highest level concept of a system in its environment.

Infrastructure

The supporting elements needed for functionality within a system.

Security Architecture

A high-level design used to satisfy a system’s security requirements as defined in an organization’s security policy.

Enterprise

Multiple internal networks, internal areas or domains, and various internal devices and systems as a single collective unit.

Objectives of Enterprise Security Architecture

Provide guidance for decision makers, ensures application of security best practices, and describes security zones.

Management’s Expectations

Mitigate risk, enhance user productivity, reduce cost, and streamline application development/integration.

Lack of Enterprise Security Approach Symptoms

Evidence includes inability to support increased user access, understanding exposures, and difficulty in e-commerce.

Security Foundation

Core security program and architecture established to support effective security management across all enterprise components.

Zachman Framework

A popular choice to define an Enterprise Architecture, providing a two-dimensional classification scheme for descriptive representations.