Chapter 2: The Core of Solution Building

In the first chapter of this book, we went through what a cybersecurity architect is, what they do (that is, the functions they perform), and the value they – and the architecture process itself – can provide to an organization. In this chapter, we will build on that to begin the process of describing how to develop an architecture.

Over the course of this chapter, we will explore the structures that organizations set up to ensure key outcomes are achieved. It is important for the architect to understand these elements because the whole point of architecture is to support the organizational mission – to do that, we have to understand what that mission is and the strategies that the organization has put in place to achieve it. This will be the backdrop to all the work we do.

We'll walk through how organizations derive their goals (including security goals), and strategies they will use to ensure those goals are...