Scope – enterprise security

"Let's consider the role of an architect through the example of building construction. The role of the architect in the life cycle of designing and building a new structure is to first listen to what the person commissioning him or her wants, and then using their skill and experience to put together a proposal that encompasses best practice, the art of the possible, and their own vision. Security architects do the same; they establish the requirements and create something that combines best practice and the art of the possible with their own vision."

– Andy Clark, Founding Director, Primary Key Associates Ltd, visiting Professor RHUL, trustee of The National Museum of Computing, SABSA Coauthor

With the understanding of scope clearly in mind, let's look in detail at initial scope-setting through the lens of an enterprise security architecture project and an application security architecture project. We'll look...