01999nas a2200229   4500008004100000022001400041245008000055210006900135260004200204300001000246490000600256520131000262653001801572653001701590653002601607653002101633653002501654653000901679653002601688100001901714856003601733       2013                        eng d  a1927-032100aAn Enterprise Security Program and Architecture to Support Business Drivers0 aEnterprise Security Program and Architecture to Support Business  aOttawabTalent First Networkc08/2013  a25-330 v33 aThis article presents a business-focused approach to developing and delivering enterprise security architecture that is focused on enabling business objectives while providing a sensible and balanced approach to risk management. A balanced approach to enterprise security architecture can create the important linkages between the goals and objectives of a business, and it provides appropriate measures to protect the most critical assets within an organization while accepting risk where appropriate. Through a discussion of information assurance, this article makes a case for leveraging enterprise security architectures to meet an organizations' need for information assurance. The approach is derived from the Sherwood Applied Business Security Architecture (SABSA) methodology, as put into practice by Seccuris Inc., an information assurance integrator. An understanding of Seccuris’ approach will illustrate the importance of aligning security activities with high-level business objectives while creating increased awareness of the duality of risk. This business-driven approach to enterprise security architecture can help organizations change the perception of IT security, positioning it as a tool to enable and assure business success, rather than be perceived as an obstacle to be avoided.10acybersecurity10acyberthreats10ainformation assurance10ainformation risk10ainformation security10arisk10asecurity architecture1 aRitchot, Brian  uhttp://timreview.ca/article/713