Purpose of this document is to establish a template for security architecture. In general, security architecture is a topic that is widely misunderstood. Most of the security architecture describes how a technology or solution components are deployed with regards to the available firewalls. The security architecture needs to take a more comprehensive view of the architecture and describe how the confidentiality, integrity and availability of information is protected, while mapping back to the more or contextual and conceptual architecture. This template will be helpful to establish a life-cycle based, risk driven, defense-in-depth, traceability assured information security architecture for the solutions that your intent to build.

Security Architecture Template