Information Technology Reference
In-Depth Information
Frameworks help to identify fundamental patterns within business, people,
behavior, technology, and information assurance. Frameworks help identify and
isolate critical issues. For security, these include the
need
for security, the
it
of
security, and the
justification
for security; security justification will be explored in
greater depth in chapter 13.
12.2
objecties
The objectives of this chapter are to:
n
n
n
Introduce the use of frameworks with respect to IA
Enumerate a series of frameworks useful to the IA architect
Articulate the details of frameworks useful to the IA architect
At the end of this chapter, you should be aware of a variety of frameworks as
supplemental tools for information assurance architecture.
12.3
enterprise Context Framework
The focus of the IA architect is information assurance. To integrate IA in the enter-
prise, the IA architect must interact with those in the roles of enterprise architect,
systems engineer, business planner, business manager, technical manager, project
manager, and operations manager, to name some. The responsibility of the IA
architect is to integrate IA into the policies, standards, procedures, enterprise archi-
tecture, systems engineering, management, and operations. To achieve this, the IA
architect needs an enterprise perspective on the business as well as the supporting
technology within the enterprise.
There are many essential questions regarding the necessity for change and the
focus of change. The first question is: Is change necessary at all? If change is neces-
sary, where is it necessary? How do you decide what to change? Have you consid-
ered the local perspective, regional perspective, enterprise perspective, competitive
perspective, marketplace perspective, and global perspective? What is the budget?
Have you considered the solution perspective? What are the appropriate tools? How
do you select the appropriate tools? How do you implement the solution to work
at all? How do you implement the solution to work effectively? How do you imple-
ment the solution to work securely? IA
2
speaks of aligning security with the enter-
prise architecture.
To begin to address these questions, consider a work breakdown structure
(WBS or WBS framework). A WBS is a method of refining a larger objective into
smaller component parts. The following is a generic WBS framework:
