A Framework for Enterprise Security Architecture and Its Application in Information Security Incident Management

Authors

Yi-Ting Shen, California State University San Bernardino
Frank Lin, California State University San Bernardino
C.E. Tapie Rohm, California State University San Bernardino

Abstract

An enterprise architecture (EA) plan is a long-term view or blueprint for an organization. It is a very important blueprint for balancing business and Information Technology (IT) and for adding value to an organization. Security is also nowadays an essential dimension for enterprises. It can prevent confidential information from being leaked, and/or stolen, lost succumbing to other serious disasters. There are many studies focusing on EA or on specific aspects of security. However, there are very few studies focusing on enterprise security architecture. This paper focuses on integrating the security dimension into the Zachman EA framework (Zachman, 2007) and is intended to serve as an enterprise security framework (ESA) to assist an organization in successfully and effectively implementing security. The efficacy of the ESA implementation is illustrated through an application in an organization.

Recommended Citation

Shen, Yi-Ting; Lin, Frank; and Rohm, C.E. Tapie (2009) "A Framework for Enterprise Security Architecture and Its Application in Information Security Incident Management," Communications of the IIMA: Vol. 9: Iss. 4, Article 2.
DOI: https://doi.org/10.58729/1941-6687.1118
Available at: https://scholarworks.lib.csusb.edu/ciima/vol9/iss4/2