Applying Security to an Enterprise using the Zachman Framework

An enterprise information architecture provides a framework for reducing information system complexity and enabling enterprise information sharing. Much like a homeowner designing a home, information technology managers work with an architect to provide an agreed upon architectural drawing for the information and processes in the enterprise. This high level architectural drawing does not change with tactical decisions to deploy improved technology since it is simply built around a framework of business processes and the information that they need. Since most enterprises have existing information systems, the architectural drawing provides the future state and facilitates the best possible strategy to remodel with the least amount of inconvenience to the business.1 In today's environment, each department or system usually has a vertically integrated approach to data, process, and technology. The Zachman Framework, named after John Zachman, has emerged as a way to develop an enterprise-wide information architecture. This framework moves from this vertical, departmental approach to a completely opposite horizontal approach. Instead of representing the data, process and technologies as entirely separate entities; he organized them around the points of view taken by various players.2