What is the term for a set of requirements, processes, principles and models that determines the structure and behavior of an organization's information systems?

What is the term for a set of requirements, processes, principles and models that determines the structure and behavior of an organization's information systems?

• A. Network Security Zoning
• B. Enterprise Information Security Architecture (EISA)
• C. Security Policies
• D. Defense-in-Depth

Answer: (B)

A comprehensive security blueprint that covers the whole organization is being described. It lays out a set of requirements, processes, principles, and models that determine how information systems are structured and how they behave across people, processes, and technology. This is the Enterprise Information Security Architecture. It provides governance, standards, reference architectures, and a structured approach to risk management, ensuring consistency and interoperability across the entire security program. Network zoning is about dividing the network into segments to control traffic and trust boundaries. Security policies are formal rules that dictate allowed behaviors. Defense-in-depth is the strategy of layering multiple security controls. While these concepts are important, they don’t define the overarching architecture that governs the entire information system landscape the way Enterprise Information Security Architecture does.

A comprehensive security blueprint that covers the whole organization is being described. It lays out a set of requirements, processes, principles, and models that determine how information systems are structured and how they behave across people, processes, and technology. This is the Enterprise Information Security Architecture. It provides governance, standards, reference architectures, and a structured approach to risk management, ensuring consistency and interoperability across the entire security program.

Network zoning is about dividing the network into segments to control traffic and trust boundaries. Security policies are formal rules that dictate allowed behaviors. Defense-in-depth is the strategy of layering multiple security controls. While these concepts are important, they don’t define the overarching architecture that governs the entire information system landscape the way Enterprise Information Security Architecture does.