A Framework for Enterprise Security Architecture and Its Application in Information Security Incident Management

摘要

An enterprise architecture (EA) plan is a long-term view or blueprint for an organization. It is a very important blueprint for balancing business and Information Technology (IT) and for adding value to an organization. Security is also nowadays an essential dimension for enterprises. It can prevent confidential information from being leaked, and/or stolen, lost succumbing to other serious disasters. There are many studies focusing on EA or on specific aspects of security. However, there are very few studies focusing on enterprise security architecture. This paper focuses on integrating the security dimension into the Zachman EA framework (Zachman, 2007) and is intended to serve as an enterprise security framework (ESA) to assist an organization in successfully and effectively implementing security. The efficacy of the ESA implementation is illustrated through an application in an organization.