developing a business prioritised roadmap.
Assessment & AssuranceInformation Security Architecture
Sense of Security's information security architecture service is designed to align with your enterprise architecture. We focus on ensuring that the security impacts of the business, information, application and technology architectures are addressed.
Our methodology for information security architecture engagements can be summarised as follows:
High level information security risk assessment. By engaging with key client executives, stakeholders, and IT we can assist with determining an organisations key information assets that are in need of protection, and then design appropriate solutions within budget constraints to mitigate the risks they are exposed to.
Information security architecture review.
- Current state review. Review of the existing IT security architecture, policies and governance and re-use considerations.
- Target state development. Develop the target information security architecture addressing both the current and future requirements, but mindful of short term drivers.
- Gap analysis between target state and the current state. We prioritise the gap items according to business risk drivers. This then leads to the development of a roadmap to progressively close the gap over time, aligned with business priorities.Roadmap. This will include the IT security governance and policies required to ensure that security is built-in as the organisation plans, designs, deploys and manages their IT infrastructure and applications.