Enterprise Security Architecture: A Business-Driven Approach [Hardcover]

John Sherwood (Author), Andrew Clark (Author), David Lynas (Author)

Book Description

ISBN-10: 157820318X | ISBN-13: 978-1578203185 | Publication Date: November 12, 2005 | Edition: 1

'Destined to be a classic work on the topic, Enterprise Security Architecture fills a real void in the knowledge base of our industry. In a comprehensive, detailed treatment, Sherwood, Clark and Lynas rightly emphasize the business approach and show how

Security is too important to be left in the hands of just one department or employee -- it's a concern of an entire enterprise. Enterprise Security Architecture shows that having a comprehensive plan requires more than the purchase of security software -- it requires a framework for developing and maintaining a system that is proactive.

Editorial Reviews

About the Author

John Sherwood, active in operational risk management for more than a decade and as an information systems professional for more than 30 years, is the Chief Architect of the SABSA(r) model. He is also a visiting lecturer and external examiner at Ro

Product Details

• Hardcover: 608 pages
• Publisher: CMP; 1 edition (November 12, 2005)
• Language: English
• ISBN-10: 157820318X
• ISBN-13: 978-1578203185
• Product Dimensions: 10.3 x 8.3 x 1.7 inches
• Shipping Weight: 3.5 pounds (View shipping rates and policies)
• Average Customer Review: 4.5 out of 5 stars  See all reviews (6 customer reviews)
• Amazon Best Sellers Rank: #33,533 in Books (See Top 100 in Books)
  • #21 in Books > Computers & Technology > Hardware > Design & Architecture
  • #27 in Books > Computers & Technology > Certification > CompTIA
  • #28 in Books > Computers & Technology > Business & Culture > Privacy

More About the Author

Discover books, learn about writers, read author blogs, and more.

Customer Reviews

Most Helpful Customer Reviews

18 of 21 people found the following review helpful:

5.0 out of 5 stars Really helpful for enterprise securty. Not a techie cookbook., February 21, 2006

By 

R. Whitehead "author of 'Leading a Software D... (Surrey, United Kingdom) - See all my reviews
(REAL NAME)   

This review is from: Enterprise Security Architecture: A Business-Driven Approach (Hardcover)

This is a particularly interesting book in that it proposes an approach to developing security architectures that are aligned with Business Needs. Most of the other literature that I have seen in this field seems to throw itself into technical detail and try to be a "cookbook" for techies.

The book is in two distinct parts - this first outlines the philosophy and approach of SABSA (Sherwood Applied Security Architecture) and the second draws on the authors' considerable experience in using SABSA in real-life scenarios, giving a set of "standard" services and mechanisms that should be considered when building an Enterprise Security Architecture.

If you are looking just to do techie "black box" security engineering with routers and servers then this book is not really for you. This is a book for those with a responsibility for enterprises where security can be seen as enabling the business rather than fighting it.

Like others with whom I have spoken, I liked the "quick notes" in the left hand column of every page that let's you speed read each chapter. They made it really easy to set a good insight into the subject quickly and focus on the areas that I really wanted to know more about.

One hidden gem in this book is the approach to Measuring Return on investment in security - it opened my eyes to using security as a business enabler.

7 of 7 people found the following review helpful:

5.0 out of 5 stars Step by step professional, January 15, 2007

By 

Biljana Cerin - See all my reviews
(REAL NAME)   

This review is from: Enterprise Security Architecture: A Business-Driven Approach (Hardcover)

It is amazing how different books can be. I read dozens of information security management related books, but this one is only I can use in my everyday job. If you are consultant or professional CISO, this book offers tips of how to do things right and how to be efficient. It is information security management bible. Buy hardcover version because you will use it every day.

3 of 3 people found the following review helpful:

5.0 out of 5 stars A Book That Should Be On Every Security Architect's Desk, May 26, 2011

By 

prophet - See all my reviews

This review is from: Enterprise Security Architecture: A Business-Driven Approach (Hardcover)

This book (and the Sherwod/Clark/Lynas philosophy) was developed in parallel to the Zachman Framework (unbeknownst to either groups). If you a familar with Zachman, you will note several consistancies here. Though some may clain this is only a conceptual read, there are many oppurtunities to take pieces of the book and apply it in daily architecture. For example, on page 88, it gives several examples of "Business Attributes" in identifying types of business drivers ranging from user, management, operational, risk management, legal/regulatory, technical strategies and business strategies attributes. Thinking these through (and identifying which key ones are important) early in the stages of security architecture help direct the design in the right way. Also, the book provides several real world examples to help illustrate the "whys".

I had the oppurtunity to attend training given by David Lynas on Enterprise Security Architecture. I would also recommend attending, as David walks through several exercises in how to apply this methodology.

In the end, if you are responsible for any security architecture, using the principles/concepts/methodologies in this book will assist in making more concious, sound, security decison making.