Security Engineering and Architecture
Provide concepts, principles, structures, and standards used to design, implement, monitor, and secure
Provide concepts, principles, structures, and standards used to design, implement, monitor, and secure operating systems, equipment, networks, applications, and those controls used to enforce various confidentiality, integrity, and availability. This service includes the implementation and execution of new deployment.
Security Architecture focuses on the roadmap and planning of security needs, while security engineering focuses on executing those. Security Engineering and Architecture focus their implementations using the following security domains:
Network Security
Network security is a set of rules and configurations designed to protect computer networks and data integrity, confidentiality, and accessibility using both software and hardware technologies.
Data Security
Data Security involves putting in place specific controls, standard policies, and procedures to protect data from a range of issues, including unauthorized access, accidental loss, destruction.
Threat and Vulnerability Management.
It is the cyclical practice of identifying, assessing, classifying, remediating, and mitigating security weaknesses and fully understanding root cause analysis to address potential policy, process, and standards flaws.
Endpoint Security
Is the cybersecurity approach to defending endpoints – such as desktops, laptops, and mobile devices – from malicious activity. It is a solution used to “prevent file-based malware attacks, detect malicious activity, and provide the investigation and remediation capabilities needed to respond to dynamic security incidents and alerts.
Security Monitoring
It involves collecting and analyzing information to detect suspicious behavior or unauthorized system changes on your network, defining which types of behavior should trigger alerts, and acting on alerts as needed.
Application Security
Application security is the practice of protecting your applications from malicious attacks by detecting and fixing security weaknesses in your applications’ code. It includes all tasks that introduce a secure software development life cycle to development teams
Physical Security
Physical security protects personnel, hardware, software, networks, and data from physical actions and events that could cause severe loss or damage to an enterprise, agency, or institution.
Cloud Security
Deals with the processes, policies, resources, and technologies involved in keeping cloud computing architectures protected from cybersecurity threats and risks. Effective cloud security measures aim to keep cloud data, applications, and services shielded against new and existing threats via proper controls and solutions.