Down the Security Rabbithole Podcast (DtSR) DtSR Episode 122 - Enterprise Architecture's Role in Security
Dec 8, 2014
51:13
Send the hosts a message - try it now!
In this episode
- Michelle explains to us what Enterprise Architecture is, and what it isn't
- Michelle gives her take on how both security and enterprise architecture both support each other
- We discuss the roll of standards, standards, standards - and why you can't have security without it
- We talk about GRC
- We talk through roles & responsibilities definition between security, architecture, and the rest of IT
- "Application Portfolio Rationalization" --the most impossible project. Ever.
- Michelle schools us on data, high-value assets, meta-data and the really hard topics for security
- Michelle gives us a series of examples of "HOW" we can find high-value assets, and start security there
- Michelle addresses the phrase "business alignment" since it's pivotal to enterprise architecture
Guest
- Michelle-Marie Strah ( @CyberSlate ) - Director, Enterprise Architecture at NBCUniversal – recently joined the newly formed Strategy and Architecture team at NBCUniversal designed to drive enterprise architecture, solutions architecture and innovation management across all companies in the NBCUniversal global portfolio. Previously she was at Microsoft Corporation worldwide headquarters where she was responsible for leading emerging markets cloud deployments, go to market and compete strategies in Latin America for public, private and hybrid cloud offers (both Azure and partner hosted clouds). As part of her role on the Applied Incubation Team she worked closely with partners, CIOs and government officials as well as internal CTO, legal, and chief security officer teams in the region to ensure privacy and security standards for government and private sector cloud adoption in Latin America. As an enterprise architect, Michelle specializes in governance, risk, compliance, information security and enterprise information management and has decades of experience in highly regulated industries, government, defense and healthcare.
Additional Links
- IBM Security Framework: http://www.redbooks.ibm.com/abstracts/sg248100.html?Open
- OSA: http://www.opensecurityarchitecture.org
- TOGAF: The Open Group Architecture Framework: http://www.opengroup.org/togaf/
>>> Please consider clicking the link above to support the show!
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
YouTube home: https://youtube.com/playlist?list=PLyo0dkKRvfVtWXjRxNISrhme1MgBj3C2U&si=scHDiTuLXSEQ9qHq
LinkedIn Page: https://www.linkedin.com/company/down-the-security-rabbithole-podcast/
X/Twitter: https://twitter.com/dtsr_podcast