Security

Attacks. Hackers. Credit card scams. Cyber terrorism. Insider flaw. Viruses and worms. What not? Nowadays, you often hear statements like "The era of innocence is over", "We can't put the genie back into the bottle.", etc. Importance of security is at its peak.

The objective of Enterprise Security Architecture is to provide a conceptual design of the network security architecture infrastructure and the related security policies and procedures. In short it needs to address applications, systems and processes and be able to manage security and operations. The enterprise links all the systems into one cohesive unit. Data and transaction security is of utmost importance in this age of rapidly increasing use of e-Commerce and the expansion of network both in private and government sector. We live in an era where every transaction is done over the wires. Online shopping, internet banking, online payment of bills and like are part and parcel of every individual's life. In such a scenario it is important for the concerned company implementing internet transaction system to keep the credentials of the customers secured from the outside world. Thus, the security issue is a major challenge in front of all the companies implementing information technology.

Enterprise security architecture is an integral component of an Enterprise Architecture and an information security program. Enterprise architecture basically provides a foundation to develop and deploy technologies while Enterprise security architecture is used as a guideline in making strategic and architectural security decisions. It is a subset of enterprise architecture frameworks. If we had to provide a generic framework, the picture to the right would be acceptable as a high-level conceptual security architecture framework. Security is present at all levels of enterprise architecture: business, information and technology.

-------------------------------------------------

[edit]NEED FOR ESA

A rough classification...