Updating the Multi-Cloud Cybersecurity Reference Architecture
It is time to update the Multi-cloud Cybersecurity Reference Architecture I wrote for Techvision Research in 2020. If you’re a security architect, I’d welcome your feedback. Please download a detailed, complimentary excerpt and summary here and provide feedback via… Continue reading
How can Cybersecurity Architecture Align Modern Business and Technology Concerns?
Cybersecurity architecture can show help us align business and technology concerns by providing modernized views of core processes and technologies. Today, that means focusing on a hybrid, multi-cloud IT environment. To really deep dive on this, please sign up for… Continue reading
Working Together to Create the Future of Security Architecture
The world really needs to take security architecture more seriously! If physical buildings were anything like security systems (experiencing a major breach practically every month), the news would be full of collapsing buildings and crumbling bridges. That’s why I’m pleased… Continue reading
Don’t Press Pause on Security Architecture During the COVID-19 Shutdown
As the “COVID-19 shutdown” pushes businesses into what I call “forced digitalization” – with everyone teleworking – it could be easy for IT and security professionals to become all-consumed by basic operational issues. Just keeping the Virtual Private Networks (VPNs)… Continue reading
The Future of Security Architecture Certification
Would you drive over a Bay Bridge built from an amateur building architect’s blueprints? What if the architect passed a multiple choice test first – is that good enough? Society’s answer to these questions is obviously NO. But unlike… Continue reading
Is Security Architecture Failing?
“One of the discussions that never happen in relationship to the numerous successful hacks is: What was the security architecture? Security architecture – or any architecture for that matter – is the foundation upon which we should secure and protect… Continue reading
Security Governance Models and Structures
At the root of most consulting engagements we often find a security governance problem. Therefore, we decided to devote some of Security Architects Partners’ next several posts to this Eternal Question: How to govern enterprise security? Should governance be centralized?… Continue reading
Golf as a Metaphor for Security Programs
Golf and security programs. They have one thing in common – very hard to get right!
We’ve written here about building security programs for our organizations based on a systematic comprehensive approach. But that notion has a lot of… Continue reading
Restricted Zones Redux
“I’m sorry if I’m inconveniencing you and the teachers, but I will not allow a networked computer system to be placed on the ship while I’m in command,” said Commander Adama as I watched the first episode of… Continue reading
A Systematic, Comprehensive Approach to Security
One of the central pillars of the security model we built in our knowledge base at Burton Group was called “A Systematic, Comprehensive Approach to Information Security.” I’ve always found this model helpful to use in any security analysis so… Continue reading