Reference no: EM132605417

Question: Respond to each question below. Remember to cover all aspects of the question.

1. Successful security architecture needs upper management to support effective security standards and protocols. However, there are possible disadvantages to upper management involvement. List and describe the tradeoffs in the business between rigorous security and delivering products to customers. Go beyond merely the automated solutions or the technical checks that can be done without much human support.

2. Examine how capturing, standardizing, applying patterns, and standard solutions help to increase efficiency and maintain delivery teams' velocity. Provide at least 3 real-world examples which describe and examine how they provide the velocity. Do not simply provide a list of things teams can do but for each idea, define the idea and explain its relevance.

3. Schoenfield lists several components of a successful security architecture practice, such as broad support across the organization, recruitment, and training of security architects with the right kind of aptitude and interest, effective security requirements that enhance but do not slow down the innovation process, and finally, indicators that the security architecture team is being well utilized and adding value to project development. Describe what each of these components is and explain how each is relevant to security development. Include detail and examples.

TextBook: Schoenfield, Brook S.E. - Securing Systems: Applied Security Architecture and Threat Models, CRC Press, 2014 ISBN: 978-1-4822-3397-1