Interface Inventory Ref. Interface Desc Data Source Target Freq. Batch / Name Object(s) Realtime IN1 [reference data [reference [reference from e.g. Daily e.g. Batch objects from from application information application architecture architecture architecture table] table] table] Infrastructure Architecture Infrastructure Diagram here(Servers / Data Stores / Switches / ..) Include infrastructure envrionments (e.g. Dev / UAT / PROD) Infrastructure Repository Ref. Hardware Specification Location IF.PRD.01 Production App Server IF.DEV.01 Security Architecture Identity and Access Management This section specifies controls related to the management and enforcement of access rights into systems, applications and resources Authentication and authorisation methods, SSO, etc. – Threat Model Ref Threat Likelihood Impact Rating Action Spoofing Unlikely (2) Moderate (3) Medium Identify security requirements of Spoofing of an Skilled attacker / information identity to gain limited external unauthorised users will Network Switches should access to the access via be configured in application secure channel mode to defeat spoofing attacks Denial of Service Unlikely (2) High Medium Data Centre Monitoring Attacker impacts Skilled attacker / Apply appropriate physical availability of the isolated servers security mechanisms application serving internal preventing and external processing and users access by users
Interface Inventory Ref. Interface Name Desc Data Object(s) Source Target Freq. Batch / Realtime IN1 [reference data objects from information architecture table] [reference from application architecture table] [reference from application architecture table] e.g. Daily e.g. Batch Infrastructure Architecture Infrastructure Diagram here(Servers / Data Stores / Switches / ..) Include infrastructure envrionments (e.g. Dev / UAT / PROD) Infrastructure Repository Ref. Hardware Specification Location IF.PRD.01 Production App Server IF.DEV.01 Security Architecture Identity and Access Management This section specifies controls related to the management and enforcement of access rights into systems, applications and resources – Authentication and authorisation methods, SSO, etc. Threat Model Ref Threat Likelihood Impact Rating Action Spoofing Spoofing of an identity to gain unauthorised access to the application Unlikely (2) Skilled attacker / limited external users will access via secure channel Moderate (3) Medium Identify security requirements of information Network Switches should be configured in mode to defeat spoofing attacks Denial of Service Attacker impacts availability of the application preventing processing and access by users Unlikely (2) Skilled attacker / isolated servers serving internal and external users High Medium Data Centre Monitoring Apply appropriate physical security mechanisms
Solution-Architecture-Document-SAD-Template.docx