Practical Cybersecurity Architecture: A guide to creating and implementing robust designs for cybersecurity architects

by Ed Moyle, Diana Kelley

Overview

Plan and design robust security architectures to secure your organization's technology landscape and the applications you develop

• Leverage practical use cases to successfully architect complex security structures

• Learn risk assessment methodologies for the cloud, networks, and connected devices

• Understand cybersecurity architecture to implement effective solutions in medium-to-large enterprises

Cybersecurity architects work with others to develop a comprehensive understanding of the business' requirements. They work with stakeholders to plan designs that are implementable, goal-based, and in keeping with the governance strategy of the organization.

With this book, you'll explore the fundamentals of cybersecurity architecture: addressing and mitigating risks, designing secure solutions, and communicating with others about security designs. The book outlines strategies that will help you work with execution teams to make your vision a concrete reality, along with covering ways to keep designs relevant over time through ongoing monitoring, maintenance, and continuous improvement. As you progress, you'll also learn about recognized frameworks for building robust designs as well as strategies that you can adopt to create your own designs.

By the end of this book, you will have the skills you need to be able to architect solutions with robust security components for your organization, whether they are infrastructure solutions, application solutions, or others.

• Explore ways to create your own architectures and analyze those from others

• Understand strategies for creating architectures for environments and applications

• Discover approaches to documentation using repeatable approaches and tools

• Delve into communication techniques for designs, goals, and requirements

• Focus on implementation strategies for designs that help reduce risk

• Become well-versed with methods to apply architectural discipline to your organization

If you are involved in the process of implementing, planning, operating, or maintaining cybersecurity in an organization, then this security book is for you. This includes security practitioners, technology governance practitioners, systems auditors, and software developers invested in keeping their organizations secure. If you're new to cybersecurity architecture, the book takes you through the process step by step; for those who already work in the field and have some experience, the book presents strategies and techniques that will help them develop their skills further.

Product Details

ISBN-13:	9781838982195
Publisher:	Packt Publishing
Publication date:	11/20/2020
Sold by:	Barnes & Noble
Format:	eBook
Pages:	418
File size:	4 MB

About the Author

Ed Moyle is a partner with SecurityCurve and Systems and Software Security Director for Taxwell. In his 25 years in information security, Ed has held numerous positions, including Director of Thought Leadership and Research for ISACA, Senior Security Strategist with Savvis, Senior Manager with CTG, and Vice President and Information Security Officer for Merrill Lynch Investment Managers. Ed is the co-author of Cryptographic Libraries for Developers and Practical Cybersecurity Architecture. He is a frequent contributor to the information security industry as an author, public speaker, and analyst
Diana Kelley is CISO at Protect AI. She serves on the boards of WiCyS, the Executive Women's Forum, InfoSec World, and TechTarget Security. She was Cybersecurity Field CTO at Microsoft, Global Executive Security Advisor at IBM Security, GM at Symantec, VP at Burton Group, Manager at KPMG, and Chief vCISO at SaltCybersecurity. Her extensive volunteer work has included serving on the ACM Ethics & Plagiarism Committee, Cybersecurity Advisor at CompTIA, and the RSAC Program Committee. She hosts BrightTALK's The Security Balancing Act, co authored Practical Cybersecurity Architecture and Cryptographic Libraries for Developers, and teaches LinkedIn Learning Security in AI and ML. Her awards include EWF Executive of the Year and SCMedia Power Player.

Table of Contents

Table of Contents

1. What is Cybersecurity Architecture?
2. The Core of Solution Building
3. Building an Architecture – Scope and Requirements
4. Building an Architecture – Your Toolbox
5. Building an Architecture – Developing Enterprise Blueprints
6. Building an Architecture – Application Blueprints
7. Execution – Applying Architecture Models
8. Execution – Future- Proofing
9. Putting It All Together