Archisurance Case study Security focus:

Q1. What are security and risks for 1. Preliminary Phase?

example sections Business Drivers/Objectives Security Principles Risk Appetite Key Risk Areas/Business Impact Analysis Security Resource Plan

Q2. For Phases A and B what should security architects identify ? What should EA and Security Architect identify for Phases A and B?

In Phase B, the security architecture output would include what? For instance: The Security Policy Architecture/Framework The Security Domain Model The Trust Framework A Risk Register

Q3. In Phase C (Information Systems Architecture) what are security elements to be included? Eg: Security Services Catalogue and any other artifacts?

Q4 Does Phase D (Technology Architecture) have any specific security artifacts beyond what was created in Phases A-C?