Hands-On Cybersecurity for Architects: Plan and design robust security architectures by Neil Rerup & Milad Aslaner

Author:Neil Rerup & Milad Aslaner [Rerup, Neil]
Language: eng
Format: epub
Tags: COM011000 - COMPUTERS / Systems Architecture / General, COM053000 - COMPUTERS / Security / General, COM025000 - COMPUTERS / Expert Systems
Publisher: Packt Publishing
Published: 2018-07-29T23:00:00+00:00

Build phase

Different organizations have different definitions and views of the security architect. Some view the security architect as a role that is all about tracking risk through a project, regardless of which phase the project is in. Some organizations view the security architect as the person that will design a solution, and then provide oversight of the implementation of the solution. And some organizations view the security architect as the role that will design as well as build the solution.

There are pros and cons for each role definition. The skill level that is associated with the tracking of risk through a project probably isn't nearly as high as the role that needs to actually design something. It's easier to criticize something than it is to design and build something. Often, organizations will have Security Analysts performing the Risk Impact Assessments (RIAs) on projects for each phase, whereas they will have security architects in place to deal with actual design needs.

Having the security architect design and build a solution can ensure that the design is understood by the person that is implementing it. After all, if the security architect doesn't understand their own design, they are going to be in trouble. But there's a separation of duties that you want to maintain, even in the building of a solution—not to mention that the operations groups typically don't like someone not of their own group actually putting hands on their equipment.

Download

Copyright Disclaimer:
This site does not store any files on its server. We only index and link to content provided by other sites. Please contact the content providers to delete copyright contents if any and email us, we'll remove relevant links or contents immediately.