Governance, Risk and Compliance

Security Congress Abstract

Mechanized Security Architecture: Using ESA to Drive Strategy

Speaker(s)

• SS

  Selvan Snow, CISSP, CCSP

  Enterprise Security Architect
  Snow Group Technologies

Enterprise Security Architecture (ESA) is a discipline related to aligning information security efforts to the highest priority risk and business objectives. This session outlines the architect's view of optimizing and organizing such strategic planning. Using the tools outlined in the session, information security leaders and architects will be able to take concepts back to their teams to aid in strategic planning. Topics covered include information security governance, capability planning, ITIL/TOGAF/SABSA integration, architectural modeling, visual security patterns, security control frameworks and risk-driven architecture.

Target Audience: CISO/CxxO, IT and information security directors, enterprise ssecurity architects,cybersecurity and IT practitioners with an interest in enterprise architecture for information security.

 

Learning Objectives:

• Understand the basic tools and mechanics employed in an Enterprise Security Architecture (ESA) program. The role of the ESA also will be discussed.
• Understand the relationship of risk to the ESA, and the role it plays in the governance of information security initiatives. Also gain a general understanding of leveraging industry frameworks to deploy security controls in alignment with information security planning and compliance.
• Obtain real-world references, tools and methodologies to build a disciplined, world-class ESA program.