Information Technology Reference
In-Depth Information
Enterprise
Business Function X
Business Process
Aggregation
Systemic Aggregation
Collective Aggregation
System
Business Process
Collective
Subsystem
Workflow
Person
Behavior
Component
Subcomponent
Assembly
Subassembly
Process (Procedure)
Task
Kinetic
Cognitive
Automated
Conscious
Unconscious
Figure 12.2
enterprise Context Framework.
nitive tasks, for procedures (application of standards to implement and enforce
policy), and for automated services (e.g., service-oriented architecture services). The
ECF provides a broader context for specific details regarding the business, technol-
ogy, risk, and integrating IA in the enterprise.
The enterprise consists of business functions that are themselves a collection
of entities, actions, and actors (Figure 12.2). A collection of entities is a systemic
aggregation (collection of systems) and systemic relationships (system interac-
tions). A collection of actions is a business process aggregation and business pro-
cess relationships. A grouping of actors is a collective or a collective aggregation
(multiple groups).
The point of ECF and all frameworks is to prompt you to look at risk from
many different perspectives and in many different contexts. The ECF provides a
decomposition of enterprise components and constituents. The enterprise com-
ponents and the relationships among them offer potential risk to the enterprise.
Appendix B contains a matrix to capture details of cross sections between the ECF
and the IA 2 views.
12.4
enterprise perspectie of iA Framework
The enterprise represents the entirety of the organization. Even if the focus of an
IA architecture is not the enterprise as a whole, the architect still defines the IA
architecture in the context of the enterprise. Many frameworks help the IA archi-
tect determine the need for and the perspective for security measures. These frame-
works start with a business focus that includes risk identification, and then work
toward how to address those risks and whether there is a need for safeguards. The
enterprise perspective of IA (EPIA) framework below presents a collection of frame-
works useful across the enterprise; many have relevance to executive, management,
 
Search WWH ::




Custom Search