OESA - Open Enterprise Security Architecture
40 000 Kč bez DPH
Luboš Fryc, TOGAF®, SABSA® and Business Architecture expert
Luboš Fryc je kouč a školitel podnikové a bezpečnostní architektury. Přednáší mj. standardy TOGAF®, SABSA® a Business Architecture, a to s důrazem na vysvětlení vzájemných vazeb s dalšími metodikami, jako řízení rizik a služeb, projektové a procesní řízení nebo ověřování kvality.
Aktivně spolupracuje na tvorbě standardů a na přípravě Bodies of Knowledge v rámci celosvětové komunity The Open Group Architecture & ArchiMate Forum.
Je držitelem certifikátů TOGAF® 9 Certified, TOGAF® Essentials 2018 a The TOGAF® Standard – Version 9.2 a IRS within TOGAF®.
Anotace:
Dvoudenní školení zaměřené na strukturální popis rámce, určeného pro návrh, implementaci a operativu bezpečností architektury podniku.
I. den
General Description of an Enterprise Security Program
- Enterprise Security Program Framework
- Enterprise Security Architecture
- Housing Design Model
- The Enterprise Security System Design Model
- Community Standards vs. Corporate Standards
- Building Codes and Engineering Practices vs. Governance
- House Architecture vs. Security Technology Architecture
- Bill of Materials vs. Security Services
- Maintenance vs. Operations
- The Remodelling
Security Governance
- Governance Components and Processes
- Governance Process Overview
- Governance Process Roles
- Governance Model Policy Framework
- Governance Principles
- Security by Design
- Managed Risk
- Usability and Manageability
- Defense in Depth
- Simplicity
- Resilience
- Integrity
- Enforced Policy
- Design for Malice
- Mobility
- Policies
- Policy Development
- Policy Template – ISO/IEC 27002:2022
- Security Policy Language – XACML
- Standards, Guidelines, Procedures
- Enforcement
- Ongoing Assessment
- Governance Example
- Authentication Policy Example
- Password Quality Enforcement Standard Example
- Example Comments
Security Technology Architecture
- Components and Processes
- Conceptual Framework for Policy-Driven Security
- Conceptual Architecture for Policy-Driven Security
- PDP/PEP Detail
- Identity Management Architecture
- Identity Management Conceptual Architecture
- Identity Management Logical Architecture
- Identity Management Security Services Template
- Identity Management Physical Architecture
- Federated Identity Management
- Border Protection Architecture
- Border Protection Conceptual Architecture
- Border Protection Logical Architecture
- Border Protection Security Services Template
- Other Security Services Template
- Access Management Services
- Configuration Management Services
- Access Control Services
- Authentication Services
- Authorization Services
- Detection Services
- Virtualization
- Content Control Services
- Auditing Srvices
- Cryptographic Services
- Design and Development
- Design Principles
- Design Requirements
- Design Best Practices
- Re-Usable Tools, Libraries, Templates
- Coding Best Practices
- Testing Best Practices
II. den
Security Operations
- Asset Management
- Security Event Management
- Security Administration
- Security Compliance
- Vulnerability Management
- Reactive Process for Responding to Vulnerability Notifications
- Proactive Process for Vulnerability Identification and Response
- Event Management
- Incident Management
- Testing Security Architecture
- Security Metrics
- Operational and Business-Aligned Metrics
- Objectives
- What is a Security Metric?
- Types of Metrics
- Applying Security Metrics
- Types of Metrics
- Security Metrics Process
Toward Policy-Driven Security Architecture
- Policy Layers and Relationships
- Policy Automation Vision
- Policy Automation Model
- Policy Automation Model – HIPAA Example
- Policy Automation Roadmap
Conclusions and Recommendations
- Conclusions
- Recommendations
- Recommendations to User Organizations
- Recommendations to Vendors and Standards Organizations
A Glossary of Resources
- Annex 1 – Security Governance Resources and Tools
- Annex 2 – NIST References for O-ESA Implementation
Security Architecture Checklist
