FAQ Category: Security and Privacy

An integrated set of security and privacy controls for the enterprise is created by including these considerations security in the planning, design, implementation, and operation of all EA components and artifacts. For information-centric enterprises, including IT security and data privacy as required design elements of EA components, and having leadership support at the strategic and… Continue reading How do I make an integrated set of security and privacy functions?s

The role of security and privacy within an EA program is best described as a comprehensive set of controls that pervade all architectural domains and are a key part of an organization’s risk management strategy. One can think of this as a vertical thread that weaves through all levels of the architecture. The thread metaphor… Continue reading Why is it important to include security and privacy in an EA program and the documentation of EA components?

There are four key elements of the Security and Privacy Program: information security, personnel, operations, and physical protection.

The aspects of physical protection that should be captured in the EA include controls for the facilities that support IT processing, control of access to buildings, equipment, networks, and telecommunications rooms, as well as fire protection, media storage, and disaster recovery systems.

In the area of personnel security, the Security and Privacy Program should promote user authentication, security awareness, and training

In the area of information security, the Security and Privacy Program should promote security and privacy-conscious designs, information content assurance, source authentication, and data access control.

In the area of operational security, the Security and Privacy Program should promote the development of SOPs for EA component security, risk assessment, testing and evaluation, remediation, certification, operation, and disposal. SOPs should also be developed for extreme events such as recovery from major outages or natural disasters, and enabling the continuity of operations if… Continue reading What are the Operational Security issues that should be reflected in the Security and Privacy Plan?

One fundamental aspect of security and privacy is the realization that there isn’t a 100% foolproof solution for any enterprise. The reason for this is that the security and privacy program and risk management strategy are created by members of that enterprise or by contracted service providers, The employees and contractors who are in security… Continue reading Why are there no 100 percent fool-proof IT Security solutions?