The Security Forum takes an architected approach to information security. For a summary of related Security Forum activities, see here.

In 2007 the Network Applications Consortium transitioned into the Security Forum. One of their significant achievements was writing their Enterprise Security Architecture Guide, which was published in 2004.   This ESA Guide contains much valuable information that remains as relevant today as when it was first published, but security practice has moved on since 2004 so there are parts of this Guide that will benefit from updating.

Accordingly, a new project to update this ESA Guide is now underway. Key updates include:

• to separate the existing content into parts to suit its different audience levels. 
• to update the contents where appropriate. An example is to update the section which refers to BS17799, to refer to the latest standard.

Documents providing further information on this security architectures work are available to members by logging in to the members-only Web area. If you would like to become involved in this security architecture work, please contact Ian Dobson.