Best Practices - Security Architecture and Enterprise Architecture

The more closely aligned the security architecture is to enterprise architecture, the more effective it will be. It should be a goal of an organization to complete the integration of security into EA .

Gartner  highlights a lot of best practices when it comes to security architecture that i want to highlight in this blog

• Security Architecture should be a continuous process
• It improves over time, and is improved with the experiences an organization gets over time
• The templates are created / developed in order to maintain compliance within the organization
• The design should be enabled by iteration with increasingly detailed levels of abstraction

Leveraging both the architectural principles and the methods in the security program of the organization can enable improvements in business alignment, maintain consistency and reuse. However it is a complex strategy that requires experience, practice and patience. 

Ref: https://www.gartner.com/doc/790521/aligning-security-architecture-enterprise-architecture

In my next part of the blog, i will talk about how security is increasingly getting important in cloud space. I will spend some time analyzing the risk involved with cloud and SaaS computing, and use case models for choosing security - appropriate SaaS (Software as a Service)