Information Security Architecture: An Integrated Approach to Security in the Organization [Hardcover]

Jan Killmeyer (Author)

Book Description

ISBN-10: 0849399882 | ISBN-13: 978-0849399886 | Publication Date: September 25, 2000 | Edition: 1

An information security architecture is made up of several components. Each component in the architecture focuses on establishing acceptable levels of control. These controls are then applied to the operating environment of an organization. Functionally, information security architecture combines technical, practical, and cost-effective solutions to provide an adequate and appropriate level of security.

Information Security Architecture: An Integrated Approach to Security in the Organization details the five key components of an information security architecture. It provides C-level executives with an understanding of the requirements for a strategic plan for security within the organization.

Editorial Reviews

About the Author

Tudor; Jan Killmeyer Tudor Engineering Management, Butler, Pennsylvania, USA,

Product Details

• Hardcover: 384 pages
• Publisher: Auerbach Publications; 1 edition (September 25, 2000)
• Language: English
• ISBN-10: 0849399882
• ISBN-13: 978-0849399886
• Product Dimensions: 9.6 x 6.5 x 1 inches
• Shipping Weight: 1.5 pounds
• Average Customer Review: 3.2 out of 5 stars  See all reviews (9 customer reviews)
• Amazon Best Sellers Rank: #1,491,758 in Books (See Top 100 in Books)

More About the Author

Discover books, learn about writers, read author blogs, and more.

Customer Reviews

Most Helpful Customer Reviews

23 of 24 people found the following review helpful:

5.0 out of 5 stars THOROUGH REFERENCE GUIDE, March 22, 2001

By 

Karen A. Patterson "Author" (Chillicothe, OH USA) - See all my reviews
(REAL NAME)   

This review is from: Information Security Architecture: An Integrated Approach to Security in the Organization (Hardcover)

This was a great reference to start an Information Security Architecture project. There are many guidelines, procedures and forms that take the guess work out of the administration of such a project. The book is great at keeping you on track with your security objectives. I have found that it is so easy with such large projects to lose sight of the objectives. Security is not only technical assessments of the network and operating components but also a combination of management and administration of personnel, policies and procedures and continuous application of pressure to meeting the security requirements of an organization. This book provides excellent value for the price.

12 of 16 people found the following review helpful:

5.0 out of 5 stars Very Informative, March 14, 2001

By 

Linda Frattaroli (Niles, OH) - See all my reviews

This review is from: Information Security Architecture: An Integrated Approach to Security in the Organization (Hardcover)

I have worked with Jan with our security project & the company I work for has really benefited from the knowledge and expertise from Jan's book. In addition, we have used the structure she illustrates in "Information Security Architecture" for implementing our company's Security Project and it is well underway due to Jan's helpful contribution. I recommend this to anyone who will be working to lay the groundwork for Security purposes. This is a valuable piece of information - Great work Jan!

5 of 6 people found the following review helpful:

4.0 out of 5 stars Book is a good foundation upon which to build a security architecture, January 31, 2007

By 

Ben Rothke "Author of 'Computer Security: 20 ... (USA) - See all my reviews
(REAL NAME)   

This review is from: Information Security Architecture: An Integrated Approach to Security in the Organization, Second Edition (Hardcover)

Architecture is the art and science of designing buildings and other structures. Using some creative license, it also encompasses the design of any entity, including information systems and their security components. But while no one would build a building without an architect, IT departments routinely design computer systems without considering the security architecture, instead believing that firewalls and other devices are quick and durable fixes.

Nothing could be further from the truth. In Information Security Architecture, author Jan Killmeyer Tudor shows that an effective and comprehensive information security infrastructure is best developed within the framework of an information security architecture (ISA), given today's distributed nature of client/server computing. In the past, when systems were closed and proprietary, security wasn't as compelling a need as it is in today's open systems.

The book covers important ISA issues such as the nature of the organization, policies and standards, baselines and risk assessment, awareness and training, compliance, and more. An underlying message is that these components must work in concert to form a cohesive ISA. Hardware and software are ineffective if they are not integrated into the ISA.

A dominant theme throughout is that implementing security technologies requires an understanding not only of the technologies' return on investment to the organization but also of the risks and vulnerabilities related to these technologies. This ISA methodology gives security professionals an excellent method for achieving just that.

Given how important policy is to an ISA, the book has several appendices that include policies, procedures, and work plans. These provide a fine foundation upon which to build a security architecture.