Application design considerations
As we mentioned previously, the approach we used in the previous chapter works well when constructing designs at the enterprise scope—designs for a business unit, an environment, a business process, or a set of related business processes. However, this is only a subset of the type of architecture efforts that we might become involved in—and only a subset of the specific situations within which we might need to create a design. We might need to perform design tasks for security elements, features, protection mechanisms, and other important security considerations within a software application.
Creating a security design for software and applications is a little different than it is for selecting the right controls to use within an organization or a portion of an organization. There are a few reasons why this is the case, but the primary ones have to do with two things:
- Communication methods used with software development resources...
