Chapter V: Architecture Issues

Lawrence M. Oliva      

Introduction

This chapter is focused on building the information architecture: what is important to consider, how to align the security, application and infrastructure architectures for maximum benefit, constructing multiple protection barriers, determining internal security threats and performing disaster planning in worst case scenarios.

Every organization has different information security, different financial resources and different risk tolerances. Balancing all of these factors with customer and shareholder expectations is a difficult job, and all of these factors change frequently. However, it is clear that some commonalities do exist across most IT organizations, permitting leveraging of best practices frameworks.

Security architectures are often created in response to a known threat or anticipated situation. While a valid activity, proactive thinking is often more cost effective than single solutions that do not directly address collateral impacts or opportunities.