Open Enterprise Security Architecture (O-ESA): A Framework and Template for Policy-Driven Security

1. Executive Overview

2. Introduction
2.1. General Description of an Enterprise Security Program
2.2. Enterprise Security Program Framework
2.3. Enterprise Security Architecture

3. Security Governance
3.1. Governance Components and Processes
3.2. Governance Process Overview
3.3. Governance Process Roles
3.4. Governance Model Policy Framework
3.5. Governance Principles
3.6. Policies
3.7. Standards, Guidelines, and Procedures
3.8. Enforcement
3.9. Ongoing Assessment
3.10. Governance Example

4. Security Technology Architecture
4.1. Components and Processes
4.2. Conceptual Framework for Policy-Driven Security
4.3. Conceptual Architecture for Policy-Driven Security
4.4. Identity Management Architecture
4.5. Border Protection Architecture
4.6. Other Security Services Template
4.7. Design and Development

5. Security Operations
5.1. Asset Management
5.2. Security Event Management
5.3. Security Administration
5.4. Security Compliance
5.5. Vulnerability Management
5.6. Event Management
5.7. Incident Management
5.8. Testing Security Architecture
5.9. Security Metrics

6. Toward Policy-Driven Security Architecture
6.1. Policy Layers and Relationships
6.2. Policy Automation Vision
6.3. Policy Automation Model
6.4. Policy Automation Roadmap

7. Conclusions and Recommendations
7.1. Conclusions
7.2. Recommendations

A: Glossary of Resources
A.1 Security Governance Resources and Tools
A.2 NIST References for O ESA Implementation

B: Security Architecture Checklist