ABSTRACT
The information security landscape comprises sophisticated threats, comprehensive regulation, diverse communities, and complex infrastructures that make ensuring the balance between usability and security a constant and demanding challenge. The adaptive security management architecture (ASMA) is an approach founded on several core principles and the value that can be gained from creating an interconnected security model focused on effectiveness, maturity, and collaboration. Security as people know it will become simply tools that are governed and applied by a collection of architecture features working together to achieve adaptability. Security adaptability is about creating a flexible, proactive environment that has the innate ability to address change in a well-defined and effective manner. Although stability in security is important and is needed to create a manageable environment, without clarity of intent the security program will become rigid and inflexible, furthering the divide with the business. The ASMA brings together different aspects of security that are generally already defined and accepted within the industry.
