E-raamat: Information Assurance Architecture

This book provides the security industry with a formal information assurance architecture that complements enterprise architecture, systems engineering, and enterprise life-cycle management. The framework provided here offers a reference model for the consideration of security in many contexts and from many perspectives. The book is primarily for security engineers, security architects, security management, and other security personnel with an interest in identifying and addressing business risk. It is also useful for enterprise architects and systems architects who desire to integrate information assurance in their solutions. Business managers, project managers, and program managers will find the book useful for understanding information assurance in the context of the enterprise, including concepts of business need, business fit, and business justification for information assurance. Readers should have at least an intermediate knowledge of information technology and information assurance. Author information is not given. Annotation ©2008 Book News, Inc., Portland, OR (booknews.com)

Now that information has become the lifeblood of your organization, you must be especially vigilant about assuring it. The hacker, spy, or cyber-thief of today can breach any barrier if it remains unchanged long enough or has even the tiniest leak. In Information Assurance Architecture, Keith D. Willett draws on his over 25 years of technical, security, and business experience to provide a framework for organizations to align information assurance with the enterprise and their overall mission.

The Tools to Protect Your Secrets from Exposure

This work provides the security industry with the know-how to create a formal information assurance architecture that complements an enterprise architecture, systems engineering, and the enterprise life cycle management (ELCM). Information Assurance Architecture consists of a framework, a process, and many supporting tools, templates and methodologies. The framework provides a reference model for the consideration of security in many contexts and from various perspectives; the process provides direction on how to apply that framework. Mr. Willett teaches readers how to identify and use the right tools for the right job. Furthermore, he demonstrates a disciplined approach in thinking about, planning, implementing and managing security, emphasizing that solid solutions can be made impenetrable when they are seamlessly integrated with the whole of an enterprise.

Understand the Enterprise Context

This book covers many information assurance subjects, including disaster recovery and firewalls. The objective is to present security services and security mechanisms in the context of information assurance architecture, and in an enterprise context of managing business risk. Anyone who utilizes the concepts taught in these pages will find them to be a valuable weapon in the arsenal of information protection.