Certified Information Security Manager (CISM)Information Security ProgramHard
A CISO is tasked with developing an information security program for a startup that plans rapid expansion into new markets and technologies. The program needs to be flexible and scalable while providing adequate protection. Which architectural approach BEST supports these requirements?
- AA microservices-based security architecture with decoupled security components.
- BA monolithic security architecture relying on a single, comprehensive security suite.
- CA perimeter-focused security architecture with a strong firewall and intrusion prevention system.
- DA legacy-system-centric security architecture designed around existing on-premise infrastructure.
Show answer & explanationAnswer & explanation
Correct answer: A. A microservices-based security architecture with decoupled security components.
A microservices-based security architecture, similar to microservices in application development, allows for independent deployment, scaling, and updating of security components. This provides the flexibility and scalability needed for a rapidly expanding startup, unlike monolithic or perimeter-focused approaches which can become bottlenecks.
Why the other options are wrong
- B. Monolithic architectures are rigid and struggle with rapid expansion and integration of new technologies.
- C. Perimeter-focused security is insufficient for modern, distributed environments and does not inherently offer high scalability for internal security.
- D. Legacy-system-centric architectures are inherently inflexible and not suitable for a startup with rapid expansion plans and new technologies.
Microservices Security Architecture
An approach where security functions are broken down into small, independent, and loosely coupled services that can be developed, deployed, and scaled independently.
- Enhances flexibility and scalability.
- Supports rapid development and deployment.
- Reduces impact of failures to individual components.
Memory trick: Micro-Moves Make Major Milestones.