Enterprise Security Architecture: A Business-Driven Approach
內容描述
Description:
Security is too important to be left in the hands of one systems architect
or department -- it is the concern of every enterprise. Having a comprehensive
plan for making and keeping an enterprise secure is the responsibility of
every senior manager, and requires more than the purchase of security
software. Enterprise security requires a framework for developing and
maintaining a proactive system to provide business assurance and enable new
business opportunities.
The authors have designed a much-needed framework for developing enterprise
security architecture using key theoretical models and decades of practical
experience. The SABSA(r) (Sherwood Applied Business Security Architecture)
model is generic and defines a process for architecture development, with each
solution unique to the individual business. At the heart of this framework is
Business Attribute Profiling, the key step in capturing business requirements,
defining measurement approaches and setting performance targets for
information system risk management. This approach, lacking for decades in the
development of information systems, provides a quantum leap for the many
systems architects who have been struggling to achieve this business
linkage.
Both technical security personnel and business managers will find this book
useful as a tutorial or reference tool. It relates security architecture
issues to business requirements using charts and graphs, and includes
descriptions of real business
situations.