security architecture

{
  "id": "MLC-T-CYB-003770",
  "term": "security architecture",
  "field": "Cybersecurity",
  "definition": "1. Fundamental concepts or properties related to a system in its environment embodied in its elements, relationships, and in the principles of its design and evolution.\n\n2. A set of physical and logical security-relevant representations (i.e., views) of system architecture that conveys information about how the system is partitioned into security domains and makes use of security-relevant elements to enforce security policies within and between security domains based on how data and information must be protected.\n\n3. A set of physical and logical security-relevant representations (i.e., views) of system architecture that conveys information about how the system is partitioned into security domains and makes use of security-relevant elements to enforce security policies within and between security domains based on how data and information must be protected. Note: The security architecture reflects security domains, the placement of security-relevant elements within the security domains, the interconnections and trust relationships between the security-relevant elements, and the behavior and interaction between the security-relevant elements. The security architecture, similar to the system architecture, may be expressed at different levels of abstraction and with different scopes.\n\n4. An embedded, integral part of the enterprise architecture that describes the structure and behavior for an enterprise’s security processes, information security systems, personnel and organizational sub-units, showing their alignment with the enterprise’s mission and strategic plans. See information security architecture.\n\n5. complying with the principles that drive the system design; i.e., guidelines on the placement and implementation of specific security services within various distributed computing environments.\n\n6. A set of related physical and logical representations (i.e., views) of a system or a solution. The architecture conveys information about system/solution elements, interconnections, relationships, and behavior at different levels of abstractions and with different scopes.\nRefer to security architecture.\n\n7. A set of physical and logical security-relevant representations (i.e., views) of system architecture that conveys information about how the system is partitioned into security domains and makes use of security-relevant elements to enforce security policies within and between security domains based on how data and information must be protected.\nNote: The security architecture reflects security domains, the placement of security-relevant elements within the security domains, the interconnections and trust relationships between the security-relevant elements, and the behavior and interactions between the security-relevant elements. The security architecture, similar to the system architecture, may be expressed at different levels of abstraction and with different scopes.",
  "abbreviation": "architecture",
  "see_also": [
    "architecture"
  ],
  "references": [
    "NIST SP 800-160v1r1 from ISO/IEC/IEEE 42010:2011",
    "NIST SP 800-160v1r1",
    "NIST SP 800-37 Rev. 2 from NIST SP 800-160 Vol. 1",
    "NIST SP 800-37 Rev. 2 from NIST SP 800-39",
    "NIST SP 800-27 Rev. A [Withdrawn]",
    "NIST SP 800-160 Vol. 1",
    "NIST CSRC Glossary"
  ],
  "url": "https://mlchart.com/terminology/cybersecurity/security-architecture/"
}