Information security architecture and SDLC/SELC
The security architecture program depends on integrating security practices into the organization’s SDLC or SELC. The SDLC/SELC is a systematized approach implemented to enhance the repeatability and predictability of the engineering or development process. The information security architect plays a significant role in integrating security measures into these processes and working with the IT, engineering, and developer teams. A strong collaboration between the information security architect and the team members involved in the SDLC/SELC process helps to design a system with built-in security right from the project’s initiation.
A typical SELC/SDLC process contains the following phases:
- Initiation phase
- Design phase
- Implementation phase
- Testing phase
- Operations and maintenance phase
- Disposition phase
Let us understand each of the phases in detail.
Initiation phase
The initiation...