Information Technology Reference
In-Depth Information
2.11.2
[IA] Architecture
There are several kinds of architectures, including
enterprise
,
solution
,
systems
, and
information assurance
architectures. Enterprise architecture (EA) takes on a view of
the entire organization. Solution architecture takes on a view of providing a busi-
ness function or support to a business process; this may take the form of one or
more business services. Systems architecture looks at a particular system or applica-
tion. IA architecture addresses the risks within any of these other architectures.
The IA architect may generate an IA architecture as a stand-alone product.
More effective is to integrate the appropriate IA services and IA mechanisms with
the enterprise architecture, solutions architecture, or systems architecture. This
integration from inception inserts IA as part of the enterprise, solution, or system.
2.11.3
[IA] Concept of Operations (CONOPS)
A CONOPS takes an architecture and applies it conceptually to the organization.
A CONOPS is a paper-based model of how the architecture will work in context
of the enterprise business environment, technical environment, business processes,
and overall culture. From an IA
2
perspective, CONOPS gives a better business
context to risks and assists to identify additional risks. Circumstances will provide
guidance on whether to integrate IA with the CONOPS or to generate a distinct
IA CONOPS.
2.11.4
[IA] Portfolio Management (PfM)
PfM attempts to manage the architecture from an investment perspective. This
includes evaluating the proposed business and technical capabilities in light of
existing business and technical capabilities and other proposed capabilities. Rel-
evant PfM questions include the following:
n
−
Business capability
Does the proposed business capability exist elsewhere endo-organiza-
tionally?
If so, why create another one?
Can the initial capability be reused in whole? In part? Why or why not?
Note:
How to reuse
is an enterprise systems engineering question.
Does the proposed business capability exist elsewhere exo-organiza-
tionally?
Can we purchase the capability exo-organizationally?
What are the trade-offs among build, buy, and lease?
What is the total cost of ownership (TCO) among:
Build in-house
n
n
n
−
n
n
n
−
