Archistry

Survivability by Design™ since 2006

  • Home
  • About
    • Who Is Andrew?
    • C2T System™
    • The Agile Security System™
  • Contact
You are here: Home / Archistry Daily / How questions can make make or break your security architecture…

December 19, 2019

How questions can make make or break your security architecture…

…and define whether you’re just playing with a security architecture modeling tool or you’re actually building security architectures that can keep your organizations safe and enable them to be successful.

Yesterday I talked about the whole “because…” bit of security architecture, and there were a couple of things I didn’t tell you—frankly, because it would’ve made the email even longer than it already was.

So today, I’m going to circle back and touch one of the (actually many) things I left out of yesterday’s email. It’s the corollary to the “because…” bit—and, like teaching your kids how to be successful adults, it’s also something that is an essential quality of the successful security architect.

You see, not very many architectures, at least the documentation, follow the advice of Paul Clements from the SEI and include the rationale, assumptions and the expectations of how the architecture will evolve over time. As security architects that come late to the party, e.g., we’re the, “Hey, we didn’t write it. We inherited it,” crowd in many cases.

So…what are you to do?

Fortunately, the answer can be found in one of the 14 Practices of the Agile Security System™ that are embedded in the whole 7 week experience of the Building Effective Security Programs course I’m running again in February. And that practice is:

Practice 3, Ask great questions.

Because in the absence of being told what you need to know to pick up someone else’s work and be able to build on it effectively…

…you’ve gotta know you should ask the questions you need to ask to figure it out.

If you don’t, at best, you have to spend a lot of time re-engineering their architectural decision-making process to try and figure out why they did what they did—

On your own, and in a vacuum.

And at the worst, you don’t know why, and you don’t bother to ask, and…

…you might end up being the Principal Obstructor of the business instead of the Principal Security Architect.

If you want to learn the practices and principles of a system designed to keep you safe and make sure that you do all you need to do to enable and protect your organization…

…then you still have until Friday to join the February cohort of Building Effective Security Architectures at a whopping 60% less than everyone else will pay later to get the same guidance, instruction, peer-reviewed feedback of your knowledge and skill development, weekly, live Q&A calls and basically, the most practical, hands-on application I can give you outside of our much more expensive coaching and mentoring program.

Whether you do or whether you don’t is entirely up to you. The link to register is here:

https://archistry.com/besa

And if there’s anything you want to know that isn’t covered by these emails, the sales page or the detailed course schedule on the check-out page, then please feel free to reply to this email and ask away.

Stay safe,

ast
—
Andrew S. Townley
Archistry Chief Executive

Article by Andrew Townley / Archistry Daily / Agile Security, Ask Great Questions, Security Architecture

  • Email
  • LinkedIn
  • Twitter
  • YouTube

EMAIL NEWSLETTER

Want to get DAILY email tips on how to build a more effective security program so you can prove your security investments deliver value to the business?

You can always unsubscribe at any time, and we won't sell your data to third parties.

About Us

Archistry works with you to ensure what you want to achieve actually gets done, linking strategy, risk, governance and compliance to enable sustained exceptional performance Read More…

Testimonials

Andrew is a highly skilled and experienced information systems architect and consultant, which in my view is a rare thing. He is innovative in his thinking and merits the title of 'thought leader' in his specialist domains of knowledge—in particular the management of risk. Andrew has embraced SABSA as a framework and, in doing so, has been a significant contributor to extending the SABSA body of knowledge."

— John Sherwood, Chief SABSA Architect

"Fabulous person to work with. Very engaging and insightful. Extremely good technical knowledge with ability to relate concepts together and overcome differing opinions. Makes things work."

— Kevin Howe-Patterson, Chief Architect, Nortel - Wireless Data Services

"Andrew was able to bring clarity and great depth of knowledge to the table. His breadth of thinking and understanding of the business and technical issues along with a clear and effective communication style were of great benefit in moving the process forward towards a successful conclusion."

— Doug Reynolds, Product Manager, MobileAware

"Andrew is a fabulous consultant and presenter that you simply enjoy listening to, as he manages to develop highly sophisticated subjects in very understandable way. His experience is actually surprising and his thoughts leave you without considerable arguments for any doubts in the subjects he covers."

— Biljana Cerin, Director, Information Security and Compliance

Recent Posts

  • If you want better security, you’d better have a better security architecture
  • The ultimate security song to keep you focused on what you’re doing
  • Security heroes
  • There’s always a people problem
  • Putting your data flow diagrams out to pasture…for good

Looking for something else?

  • Home
  • About
  • Contact

  • Terms of Service
  • Privacy Policy
  • Cookie Policy
  • Copyright © 2006-2025 Archistry Incorporated or its affiliates

"Archistry", the stained glass window logo, "Pragmantix" and the Pragmantix™ logo, "Archistry Execution Framework (AEF)", "Archistry Execution Framework, Cybersecurity Edition (ACS)", "The Agile Security System", "The Agile Business System", "Baseline Perspectives", "Architecture Wall", "Archistry Execution Engine", "Renegade Security", "Renegade Security System", "Security Value Delivery System (SVDS)" "Collapse-to-Traction", "Collapse-to-Traction System", "Adaptive Trust & Governance Model (ATGM)", and "Adaptive Trust & Governance Model for Organizations (ATGM4O)" are trademarks of Archistry Incorporated or its affiliates.