Murray Rosenthal, CISA, is Senior Policy Analyst – Security Risk Management & Information Security Information & Technology Strategic Planning & Architecture, in the Information & Technology Division, City of Toronto. He is a well-regarded information security practitioner with 20 years of experience in the information security profession. He is known for his thought leadership in the areas of information security strategic planning and information security management systems, as well as state modeling and breach vector identification across the domain architectures of business, information, application, technology, security and privacy. Murray is also responsible for leading-edge thinking on security-related aspects of the Zachman Framework for Enterprise Architecture, described by John Zachman as “especially innovative”.

Murray is a sought-after speaker, having presented at security conferences and fora in both the United States and Canada on topical issues of interest to senior and C-level management. He was a municipal representative on the Identity Authentication & Authorization Working Group of the Public Sector CIO Council (PSCIOC) and Public Sector Service Delivery Council (PSSDC), and sat on the Generally Accepted Information Security Principles (GAISP) Working Group (Information Security Policy Domain), formed under the aegis of the Information Systems Security Association (ISSA). He was part of the focus group that reviewed Secure IT Infrastructure for E-Commerce, sponsored jointly by the Canadian Institute of Chartered Accountants (CICA) and the Information Technology Advisory Committee (ITAC).

Murray has been published in the proceedings of the American Society for Quality Control, and has written for, and been interviewed by, Municipal Interface, the national journal of the Municipal Information Systems Association (MISA/ASIM Canada).

Murray was the MISA/ASIM Canada representative on the Inter-jurisdictional Pan-Canadian Identity Management & Authentication Task Force, commissioned by Government of Canada Deputy Ministers for Service Delivery. Most recently, Murray sits on a panel of security experts providing guidance to Canadian and British academic researchers on challenges to e-commerce adoption between Canada and the United Kingdom. He also sits on the Program Advisory Committee, School of Applied Computing and Engineering Sciences, Sheridan Institute of Technology and Advanced Learning, and is a panel member and forum moderator on the PCI Knowledge Base website.

Presentation

The Disciplines of Information Security and Security Architecture: Two Complementary Ambits

Information security and security architecture are often considered synonymous and are said to describe the same discipline. In practice, however, the two terms describe different, but complementary, areas of focus.

This presentation will frame the disciplines of information security and security architecture, respectively, and highlight their complementary natures.

return to program