Security Reference Architecture

Author

Dan Blum – Principal Consulting Analyst

Abstract

In our research reports, events, and consulting engagements, TechVision emphasizes that organizations must transform themselves into Digital Enterprises. Becoming a secure Digital Enterprise demands organizations develop agile and adaptive security programs and technology capabilities well-aligned to business and IT. These capabilities will enable Digital Enterprises to safely optimize responses to business opportunities, regulatory requirements, and changing IT environments or threat landscapes.

This report provides a Security Reference Architecture and guidance for secure digital enterprises. It contains business and technical views that security teams can customize to fit their specific needs. It describes high-level functional components and capabilities, maps them to industry-standard control frameworks, and identifies the business stakeholders to align with for the purpose of adapting to local conditions.