Initiating the Project and Defining Its Scope
Choose a fictional or actual organization. Describe the mission of the organization and the business need to move to a cloud environment.
Identify the scope of the security architecture and include a topology. Focus on issues the application security engineers can control. Examples of topology include Amazon Web services, Generic Hadoop, Map-r, Cloudera, or MS Azure.
Combine security development lifecycle and software development lifecycle methodologies. Consider what model you are following such as Waterfall, Spiral, Agile, and Extreme Programming.
Address confidentiality, integrity, and availability requirements for data at rest and data in transit.
Address confidentiality, integrity, and availability requirements for data at rest and data in transit.
Describe the concepts and products you chose and explain why these were chosen. Include possible software and hardware components as well as an operating system and the security protections needed for those components.