Evaluate tested and re-usable security software and security system
resources
Identify new code/resources/assets that are appropriate for re-use
Determine "what can go wrong?"
Phase F: Migration Planning
Assess the impact of new security measures upon other new components or
existing leveraged systems
Implement assurance methods by which the efficacy of security measures will
be measured and communicated on an ongoing basis
Identify correct secure installation parameters, initial conditions, and
configurations
Implement disaster recovery and business continuity plans or
modifications
Determine "what can go wrong?"
Phase G: Implementation Governance
Establish architecture artifact, design, and code reviews and define
acceptance criteria for the successful implementation of the findings
Implement methods and procedures to review evidence produced by the system
that reflects operational stability and adherence to security policies
Implement necessary training to ensure correct deployment, configuration, and
operations of security-relevant subsystems and components; ensure awareness training of all users and non-privileged operators of
the system and/or its components
Determine "what has gone wrong?"
Phase H: Architecture Change Management
Determine "what has gone wrong?"
Incorporate security-relevant changes to the environment into the
requirements for future enhancement (enhancement of existing objective)
References
Using TOGAF to Define & Govern SOAs
Overview
Introduction
Business-Led SOA Community
Business- & Developer-Led SOA Communities
Complexities Arising from SOA
How Enterprise Architecture Supports SOA
SOA and TOGAF
Guidelines for Service Contract Definition
Service Qualities and TOGAF
Purpose of a Service Contract
Service Governance Considerations
Service Contracts
Service Policies
Service Lifecycle Management
Service Metadata
Content and Structure of a Service Contract
Service Contract Template
Architecture Principles
Introduction
Characteristics of Architecture Principles
Components of Architecture Principles
Developing Architecture Principles
Qualities of Principles
Applying Architecture Principles
Example Set of Architecture Principles
Business Principles
Data Principles
Application Principles
Technology Principles
Stakeholder Management
Introduction
Approach to Stakeholder Management
Steps in the Stakeholder Management Process
Identify Stakeholders
Classify Stakeholder Positions
Determine Stakeholder Management Approach
Tailor Engagement Deliverables
Template Stakeholder Map
Architecture Patterns
Introduction
Background
Content of a Pattern
Terminology
Architecture Patterns and Design Patterns
Patterns and the Architecture Continuum
Patterns and Views
Patterns and Business Scenarios
Architecture Patterns in Use
US Treasury Architecture Development Guidance (TADG)
TADG Pattern Content
TADG Architecture Patterns
IBM Patterns for e-Business
Some Pattern Resources
Business Scenarios
Introduction
Benefits of Business Scenarios
Creating the Business Scenario
Overall Process
Gathering
Analyzing
Reviewing
Contents of a Business Scenario
Contributions to the Business Scenario
Business Scenarios and the TOGAF ADM
Guidelines on Developing Business Scenarios
General Guidelines
Questions to Ask for Each Area
Identifying, Documenting, and Ranking the Problem
Identifying the Business & Technical Environment, and Documenting in
Models
Identifying and Documenting Objectives
Identifying Human Actors and their Place in the Business Model
Identifying Computer Actors and their Place in the Technology Model
Documenting Roles, Responsibilities, Measures of Success, Required
Scripts
Checking for Fitness-for-Purpose, and refining if necessary
Guidelines on Business Scenario Documentation
Textual Documentation
Business Scenario Models
Guidelines on Goals and Objectives
Importance of Goals
Importance of SMART Objectives
Example of Making Objectives SMART
Categories of Goals and Objectives
Goal: Improve Business Process Performance
Goal: Decrease Costs
Goal: Improve Business Operations
Goal: Improve Management Efficacy
Goal: Reduce Risk
Goal: Improve Effectiveness of IT Organization
Goal: Improve User Productivity
Goal: Improve Portability and Scalability
Goal: Improve Interoperability
Goal: Increase Vendor Independence
Goal: Reduce Lifecycle Costs
Goal: Improve Security
Goal: Improve Manageability
Summary
Gap Analysis
Introduction
Suggested Steps
Example
Migration Planning Techniques
Implementation Factor Assessment and Deduction Matrix
Consolidated Gaps, Solutions, and Dependencies Matrix
Architecture Definition Increments Table
Enterprise Architecture State Evolution Table
Business Value Assessment Technique
Interoperability Requirements
Overview
Defining Interoperability
Enterprise Operating Model
Refining Interoperability
Determining Interoperability Requirements
Reconciling Interoperability Requirements with Potential Solutions
Summary
Footnotes
Business Transformation Readiness Assessment
Introduction
Business Transformation Enablement Program (BTEP)
Determine Readiness Factors
Present Readiness Factors
Assess Readiness Factors
Readiness Factor Vision
Readiness Factor Rating
Readiness Factor Risks & Actions
Readiness and Migration Planning
Marketing the Implementation Plan
Conclusion
Footnotes
Risk Management
Introduction
Risk Classification
Risk Identification
Initial Risk Assessment
Risk Mitigation and Residual Risk Assessment
Conduct Residual Risk Assessment
Risk Monitoring and Governance (Phase G)
Summary
Capability-Based Planning
Overview
Capability-Based Planning Paradigm
Concept of Capability-Based Planning
Capability Dimensions
Capability Increments
Capabilities in an Enterprise Architecture Context
Summary
Introduction
Overview
Content Metamodel
Content Framework and the TOGAF ADM
Structure of Part IV
Content Metamodel
Overview
Content Metamodel Vision and Concepts
Core Content Metamodel Concepts
Core and Extension Content
Core Metamodel Entities
Catalog, Matrix, and Diagram Concept
Overview of the Content Metamodel
Content Metamodel in Detail
Core Content Metamodel
Core Architecture Artifacts
Full Content Metamodel
Content Metamodel Extensions
Governance Extensions
Purpose
Required Changes to the Metamodel
Services Extensions
Purpose
Required Changes to the Metamodel
Process Modeling Extensions
Purpose
Required Changes to the Metamodel
Data Extensions
Purpose
Required Changes to the Metamodel
Infrastructure Consolidation Extensions
Purpose
Required Changes to the Metamodel
Motivation Extensions
Purpose
Required Changes to the Metamodel
Content Metamodel Objects
Content Metamodel Attributes
Metamodel Relationships
Footnotes
Architectural Artifacts
Basic Concepts
Simple Example of a Viewpoint and View
Developing Views in the ADM
General Guidelines
View Creation Process
Views, Tools, and Languages
Overview
Views and Viewpoints
Example of Views and Viewpoints
Views and Viewpoints in Enterprise Architecture
Need for a Common Language and Interoperable Tools for Architecture
Description
Conclusions
Taxonomy of Architecture Viewpoints
Viewpoints in the Preliminary Phase
Principles Catalog
Viewpoints in Phase A
Stakeholder Map Matrix
Value Chain Diagram
Solution Concept Diagram
Viewpoints in Phase B
Organization/Actor Catalog
Driver/Goal/Objective Catalog
Role Catalog
Business Service/Function Catalog
Location Catalog
Process/Event/Control/Product Catalog
Contract/Measure Catalog
Business Interaction Matrix
Actor/Role Matrix
Business Footprint Diagram
Business Service/Information Diagram
Functional Decomposition Diagram
Product Lifecycle Diagram
Goal/Objective/Service Diagram
Business Use-Case Diagram
Organization Decomposition Diagram
Process Flow Diagram
Event Diagram
Viewpoints in the Phase C Data Architecture
Data Entity/Data Component Catalog
Data Entity/Business Function Matrix
System/Data Matrix
Class Diagram
Data Dissemination Diagram
Data Security Diagram
Class Hierarchy Diagram
Data Migration Diagram
Data Lifecycle Diagram
Viewpoints in the Phase C Application Architecture
Application Portfolio Catalog
Interface Catalog
System/Organization Matrix
Role/System Matrix
System/Function Matrix
Application Interaction Matrix
Application Communication Diagram
Application and User Location Diagram
System Use-Case Diagram
Enterprise Manageability Diagram
Process/System Realization Diagram
Software Engineering Diagram
Application Migration Diagram
Software Distribution Diagram
Viewpoints in Phase D
Technology Standards Catalog
Technology Portfolio Catalog
System/Technology Matrix
Environments and Locations Diagram
Platform Decomposition Diagram
Processing Diagram
Networked Computing/Hardware Diagram
Communications Engineering Diagram
Viewpoints in Phase E
Project Context Diagram
Benefits Diagram
Viewpoints for Requirements Management
Requirements Catalog
Developing a Business Architecture View
Stakeholders and Concerns
Developing the View
Key Issues
Developing an Enterprise Security View
Stakeholders and Concerns
Developing the View
Basic Concepts
Information Domains
Strict Isolation
Absolute Protection
Security Generic Architecture View
Security Services Allocation
Operating System Services
Network Services
System Security Management Services
Developing a Software Engineering View
Stakeholders and Concerns
Development Approach
Software Modularity and Re-Use
Portability
Migration and Interoperability
Key Issues
Data-Intensive versus Information-Intensive Software Systems
Achieving Interoperability
Software Tiers
Two-Tier
Three-Tier
Five-Tier
Some Uses of a Data Access Tier
One Possible Instantiation of a DAI
DAIs Enable Flexibility
Distribution
Infrastructure Bus
Conclusion
Developing a System Engineering View
Stakeholders and Concerns
Key Issues
Client/Server Model
Master/Slave and Hierarchic Models
Peer-to-Peer Model
Distributed Object Management Model
Developing a Communications Engineering View
Stakeholders and Concerns
Key Issues
Communications Infrastructure
Communications Models
The OSI Reference Model
Communications Framework
Allocation of Services to Components
Developing a Data Flow View
Stakeholders and Concerns
Developing the View
Key Issues
Database Management Systems
Database Models
Distributed DBMSs
Distributed Heterogeneous DBMSs
Data Dictionary/Directory Systems
Data Administration
Repository
Database Administration
Data Security
Developing an Enterprise Manageability View
Stakeholders and Concerns
Developing the View
Key Issues
Developing an Acquirer View
Stakeholders and Concerns
Developing the View
Key Issues
Footnotes
Architecture Deliverables
Introduction
Deliverable Descriptions
Architecture Building Blocks
Architecture Contract
Purpose
Content
Architecture Definition Document
Purpose
Content
Architecture Principles
Purpose
Content
Architecture Repository
Purpose
Content
Architecture Requirements Specification
Purpose
Content
Architecture Roadmap
Purpose
Content
Architecture Vision
Purpose
Content
Business Principles, Business Goals, and Business Drivers
Purpose
Content
Capability Assessment
Purpose
Content
Change Request
Purpose
Content
Communications Plan
Purpose
Content
Compliance Assessment
Purpose
Content
Implementation and Migration Plan
Purpose
Content
Implementation Governance Model
Purpose
Content
Organizational Model for Enterprise Architecture
Purpose
Content
Request for Architecture Work
Requirements Impact Assessment
Purpose
Content
Solution Building Blocks
Statement of Architecture Work
Purpose
Content
Tailored Architecture Framework
Purpose
Content
Transition Architecture
Purpose
Content
Building Blocks
Overview
Introduction to Building Blocks
Overview
Generic Characteristics
Architecture Building Blocks
Characteristics
Specification Content
Solution Building Blocks
Characteristics
Specification Content
Building Blocks and the ADM
Basic Principles
Building Blocks in Architecture Design
Building Block Design
Building Block Specification Process in the ADM
Building Blocks Example
Introduction
Structure
Background to the Example
Identifying Building Block Scope
Identifying Building Block Requirements and Constraints
Assumptions of Required Technical Functionality
Architecture Modeling
Customer Information System Building Block Specification
Description
Mandated Building Blocks
Map to Business Organization Entities and Policies
Opportunity Identification
Building Block Re-Use Level
Footnotes
Introduction
Introduction
Structure of Part V
Enterprise Continuum
Overview
Enterprise Continuum and Architecture Re-Use
Constituents of the Enterprise Continuum
Enterprise Continuum in Detail
Architecture Continuum
Foundation Architecture
Common Systems Architectures
Industry Architectures
Organization-Specific Architectures
Solutions Continuum
Foundation Solutions
Common Systems Solutions
Industry Solutions
Organization-Specific Solutions
Relationship between the Enterprise Continuum and TOGAF ADM
Enterprise Continuum and Your Organization
Relationships
Your Enterprise
Architecture Partitioning
Overview
Characteristics of Solutions
Characteristics of Architectures
Applying Classification to Create Partitioned Architectures
Partitioning the Architecture Landscape to Understand the State of the
Enterprise
Partitioning Reference Models to Encourage Good Practice and Re-Use
Enforce Corporate Policy though Compliance with Standards
Activities within the Preliminary Phase
Activities within Phases A to F
Activities within Phases G and H
Content Aggregation and Integration
Footnotes
Architecture Repository
Overview
Architecture Landscape
Reference Library
Overview
Standards Information Base
Overview
Types of Standard
Standards Lifecycle
Standards Classification within the Standards Information Base
Governance Log
Overview
Contents of the Governance Log
Tools for Architecture Development
Overview
Issues in Tool Standardization
Evaluation Criteria and Guidelines
Tool Criteria
Functionality
Key Features and Functions
Intuitiveness/Ease-of-Use Factors
Organizational Compatibility Factors
Tool Capacity/Scalability Constraints
Architecture of the Tool
Full Lifecycle Support
Interoperability Factors
Financial Considerations
Vendor Factors
General Pointers
Foundation Architecture: Technical Reference Model
Concepts
Role of the TRM in the Foundation Architecture
TRM Components
Other TRMs
High-Level Breakdown
Overview
Portability and Interoperability
TRM in Detail
Introduction
TRM Entities and Interfaces
Application Software
Business Applications
Infrastructure Applications
Application Platform
Platform Concept
Extending the TRM
Interfaces Between Services
Future Developments
Communications Infrastructure
Application Platform Interface
Communications Infrastructure Interface
Qualities
Application Platform - Taxonomy
Basic Principles
Application Platform Service Categories
Object-Oriented Provision of Services
Application Platform Service Qualities
Principles
Taxonomy of Service Qualities
Detailed Platform Taxonomy
Data Interchange Services
Data Management Services
Graphics and Imaging Services
International Operation Services
Location and Directory Services
Network Services
Operating System Services
Software Engineering Services
Transaction Processing Services
User Interface Services
Security Services
System and Network Management Services
Object-Oriented Provision of Services
Integrated Information Infrastructure Reference Model
Basic Concepts
Background
Components of the Model
Relationship to Other parts of TOGAF
Key Business and Technical Drivers
Problem Space: The Need for Boundaryless Information Flow
Solution Space: The Need for Integrated Information Infrastructure
Status of the III-RM
High-Level View
Derivation of the III-RM from the TRM
High-Level III-RM Graphic
Components of the High-Level III-RM
Detailed Taxonomy
Detailed III-RM Graphic
Business Applications
Information Provider Applications
Brokerage Applications
Information Consumer Applications
Infrastructure Applications
Development Tools
Business Modeling Tools
Design Modeling Tools
Implementation and Construction Tools
Data Modeling Tools
Deployment Tools
Libraries
Management Utilities
Operations, Administration, and Management (OA&M) Utilities
Quality of Service Manager Utilities
Copy Management Utilities
Storage Management Utilities
Application Platform
Software Engineering Services
Security Services
Location and Directory Services
Human Interaction Services
Data Interchange Services
Data Management Services
Additional Operating System Services
Qualities
Footnotes
Introduction
Overview
Structure of Part VII
Establishing an Architecture Capability
Overview
Phase A: Architecture Vision
Phase B: Business Architecture
Phase C: Information Systems Architecture - Data
Phase C: Information Systems Architecture - Application
Phase D: Technology Architecture
Phase E: Opportunities & Solutions
Phase F: Migration Planning
Phase G: Implementation Governance
Phase H: Architecture Change Management
Requirements Management
Architecture Board
Role
Responsibilities
Setting Up the Architecture Board
Triggers
Size of the Board
Board Structure
Operation of the Architecture Board
General
Preparation
Agenda
Minutes of Previous Meeting
Requests for Change
Dispensations
Compliance Assessments
Dispute Resolution
Architecture Strategy and Direction Documentation
Actions Assigned
Contract Documentation Management
Any Other Business (AOB)
Schedule of Meetings
Architecture Compliance
Introduction
Terminology: The Meaning of Architecture Compliance