(some of) my events
- 2018-12-05--07 Teknisk informationssäkerhet (teaching course, Stockholm)
- 2018-11-28 Informationssäkerhet för ledare (teaching course, Stockholm)
- 2018-10-03--05 Operativ informationssäkerhet (teaching course, Stockholm)
- 2018-09-05--07 Strategisk informationssäkerhet (teaching course, Stockholm)
- 2018-06-18 A framework for Information Risk maturity (presenting at SRA Europe, Östersund)
from craft to engineering
Security Architecture implies plurality.
In our recent Operativ InfoSec course, my eminent colleague Sebastian Åkerman talked about nomenclature and a systemic approach with a toolbox of Security Mechanisms. If an organisation can agree on terminology, it can describe existing capabilities (as well as desired ones) with bidirectional traceability between business need and component.
When InfoSec deals with building systems one at a time, architecture can help security work mature from craft to engineering.