Requirements for a true enterprise-wide security infrastructure:the play's the thing

摘要

Business has certain requirements that must be met if theenterprise is to thrive; some of these requirements are affected bysecurity systems. The relationship of these requirements and supportingbusiness has been well illustrated by the success of enterprise resourceplanning (ERP) systems and the initial failure and subsequenttransformational impact of tools such as spreadsheets. If designedcorrectly, an enterprise-wide security infrastructure can, in fact,enable new business. However, the best security in the world will not beadequate if the business itself is not supported. This paper describes aset of minimum requirements that must be met if security systems are tomeet their promise of enabling entirely new lines of business, and thendescribes an instantiation of these requirements in a currentlyavailable system