Security Architects Information

Managing the organisation’s security is a specialised cross-cutting element its strategic and operational risk management. Security management supports the organisation’s strategy by actively managing the organisation’s risks, levering opportunities and ensuring compliance with legislation, industry standards and best practice. It needs a holistic, top-down, strategy-driven approach – too often, security controls are identified and implemented ad-hoc, isolated and as a reaction to an event or audit report. Security Architects provide risk management and security architecture services. We leverage the proven SABSA framework for Enterprise Security Architecture (ESA) enhanced with models, views, tools and reference material that we have developed over many years in practical project engagements. The benefits of this approach are: * Quick and comprehensive delivery, based on a sound framework and comprehensive reference models * Risk-based, strategy-driven, integrated methodology that guarantees top-down and vice-versa traceability * Security attribute and domain identifies controls to address risks in a measurable manner, leverages opportunities and assigns unambiguous accountability