Information Security Architecture
Just as conventional architecture defines the rules and standards for the construction of buildings, information security architecture addresses the design and implementation of the security posture of the organization. Architecture helps to integrate different components of information security in an effective manner. A security architecture also defines the baseline, that is, the minimum level of security for the infrastructure.
A security architecture generally addresses the following aspects:
- Where to place and deploy security tools, such as firewalls, intrusion detection systems (IDSs), and antimalware
- How to configure the security of applications and servers
- How to build the overall security environment
A structured architecture provides the framework to manage a complex environment. As the size and complexity of the organization grow, a well-defined architecture helps the security manager to monitor and control the...
