Up-to-date syndicated information on database & ERP privacy, security, audit and compliance
RSS icon Email icon Home icon
  • Solution Architecture Tool Kit: Overview

    Posted on February 24th, 2012 Bill Nagel No comments
    This tool kit discusses the role and importance of solution architects, the solution architecture process, templates for solution architecture deliverables, and solution architecture best practices.
  • EA Skills Development Tool Kit

    Posted on February 21st, 2012 Bill Nagel No comments
    This tool kit will help address how to develop the skills needed to prime the EA team for success. We provide a variety of proven and tested architecture skills development techniques suggested by our clients. It will help you put together either a structured, formal skills development program or a more opportunistic approach, depending on which tactic better suits your organization's individual culture.
  • Federal IT Cost Reduction Efforts Will Require Process Change To Succeed

    Posted on February 6th, 2012 Bill Nagel No comments
    In an attempt to control IT costs, the US federal government is establishing mandates that are forcing deep and massive technology change. With data center consolidation and cloud migrations entering full tilt, federal agencies and their components are counting on enterprise architecture (EA) to help guide the transformation. In this research, we report the findings from our interview with an experienced IT manager at the IRS who helped his organization through a similar cost-reduction effort. We relate lessons learned and examine the implications for a consolidated, cloud-enabled future for the federal government.
  • Teleconference: Integration Competency Center Best Practices

    Posted on December 19th, 2011 Bill Nagel No comments
    Integration competency centers or centers of excellence are proving to be a key enabler of improving the effectiveness of enterprise integration efforts.
  • InfoSec: Enterprise Architecture Building Codes

    Posted on December 11th, 2011 Edward Ferrara No comments

    There are many types of criminals. These include thrill-seeking hackers, politically motivated hackers, organized criminals after financial gain, and state-sponsored groups after financial gain and intellectual property or both. Any of these have the potential to break these capabilities through information loss, or denial of service. Business processes and their associated transactions need to look at information security as a key component of any architectural design we might create as Enterprise Architects.

    Security architecture is dependent on the idea of "security." Security by some definitions is the trade-off of convenience for protection. When I am unloading the car and have an armful of groceries, it's challenging to unlock the front door at the same time. Alternatively I could just leave the front door unlocked but that might invite guests I had not planned for. So I trade convenience for protection.

    • Security is often seen as in conflict with business users; however, security is a process that protects the business and allows it to effectively operate.
    • Security is in response to perceived business risks.
    • Security can be seen as a benefit and a business enabler and can aid organizations to achieve their business objectives.

    Forrester Vice President, Principal Analyst Randy Heffner wrote in his article of May 2011, "The Future Of Solution Architecture, Part 1: Business Processes Within A Capability," on set of architectural views to describe the enterprise and the processes and systems that make up the enterprise. Randy defines six design focal points that define successful business technology implementation. As I read this article I thought it important to provide the information security perspective on Randy's approach.

    Read more