Cybersecurity Architecture

A critical function that is sometimes overlooked or doesn’t always have the involvement of a cybersecurity team across an organization as a whole is that of enterprise architecture. In large organizations, there will typically be an enterprise architecture function or a team of architects that supports the organization as a whole, or you may find architects embedded within different functions of the business. In a smaller organization, there may be no architecture presence, or it falls as a responsibility within the IT function. Regardless of where architecture lives within the organization, there must be a cybersecurity presence for all architecture-related decisions. It is also important that your cybersecurity architecture strategy aligns with your broader architecture strategy and business strategy to securely and efficiently enable your business.

In Chapter 4, Solidifying Your Strategy, we discussed the breakdown of architecture into two...