Service-Oriented Security Architecture and its Implications for Security Department Organization Structures

摘要

If an information security department has embraced Service Oriented Security Architecture (SOSA), this cannot be undertaken exclusively at the micro, technological level. SOSA must also be considered from the perspective of the organizational structure of the security department. Based on the work of Golembiewski, it is argued that the organizational structure must be architected in a more state of the art “by flow of work” configuration versus the old “by function” approach to ensure the department aligns with the business units it serves.