Architecting information assurance

Architecting information assurance in complex enterprises is a challenge that requires the skills of many different professions. Combining all possible solutions in a structured approach to meeting assurance needs throughout the phases of protection, detection, and reaction/correction and within resource limitations is enormously complex. This paper describes an approach to systematically developing feasible architectures that meet identified needs within resource constraints.