Future-proofing designs

'The future is data-centricity, not technology-centricity or network-centricity. Vendors have products focused on network security; they have engineers who know about networking. But that's only one aspect of the problem. For example, the emergence of cloud architecture is massive in its implications. People still do not yet appreciate how much the cloud requires a change in architectural thinking. I think this tells us that the development of architectural ideas for security and risk management will always be changing because there's always new challenges coming along. It requires us to be agile and open-minded.'

– John Sherwood, chief architect, thought leader, and co-founder at The SABSA Institute

In planning mitigation strategies for dealing with change, only one dimension of our change planning involves the potential issues and challenges we'll encounter during execution. We will also need to plan for future events...