802
edits
Changes
Jump to navigation
Jump to search
Created page with "<div class="center"><div style="float: right; z-index: 10; position: absolute; right: 0; top: 1;">File:JoinusonGCconnex.png|link=http://gcconnex.gc.ca/groups/profile/2785549..."
<div class="center"><div style="float: right; z-index: 10; position: absolute; right: 0; top: 1;">[[File:JoinusonGCconnex.png|link=http://gcconnex.gc.ca/groups/profile/2785549/gc-enterprise-security-architecture-gc-esa]]<br />[[File:ESAcontactus.png|link=mailto:ZZTBSCYBERS@tbs-sct.gc.ca]]</div> [[File:GOC ESA.jpg|center|link=http://www.gcpedia.gc.ca/wiki/Government_of_Canada_Enterprise_Security_Architecture_(ESA)_Program]] <div class="center">
{| style="border: 2px solid #000000; border-image: none;" width="1000px"
|-
! style="background: #e1caf7; color: black" width="20%" scope="col" " width="175px" | [[Government of Canada Enterprise Security Architecture (ESA) Program|ESA Program Overview]]
! style="background: #e1caf7; color: black" width="20%" scope="col" " width="125px" | [[ESA Backgrounder (Strategy)|ESA Foundation]]
! style="background: #e1caf7; color: black" width="20%" scope="col" " width="125px" | [[ESA Requirements|ESA Artifacts]]
! style="background: #e1caf7; color: black" width="20%" scope="col" " width="125px" | [[ESA Initiatives|ESA Initiatives]]
! style="background: #C495F0; color: black" width="20%" scope="col" " width="125px" | [[ ESA Tools and Templates]]
! style="background: #e1caf7; color: black" width="20%" scope="col" " width="125px" | [[GC ESA Artifact Repository|ESA Reference Materials]]
! style="background: #e1caf7; color: black" width="20%" scope="col" " width="100px" | [[ESA Glossary| Glossary]]
|}
{| style="border-bottom: #000000 2px solid; border-left: #000000 2px solid; border-right: #000000 2px solid" width="1000px"
|-
! style="background: #9a9af8; color: black" width="14%" scope="col" colspan="2" | [[ESA Tools|Tools]]
! style="background: #c2c2fa; color: black" width="14%" scope="col" | [[ESA Template Guides|Templates]]
|}
{| style="border-bottom: #000000 2px solid; border-left: #000000 2px solid; border-right: #000000 2px solid" width="1000px"
|-
! style="background: #969696; color: black" width="25%" scope="col" | [[Security Categorization Tool]]
! style="background: #d7d7d7; color: black" width="25%" scope="col" | [[Business Needs for Security Tool]]
! style="background: #d7d7d7; color: black" width="25%" scope="col" | [[Threat Assessment Tool]]
|}
</div></div>{{TOCright}}
== Introduction ==
To facilitate the integration of security into existing business practices and processes, a set of tools and templates have been developed to support practitioners when implementing their IT security risk management activities.
The following tools are currently available:
* [[Security Categorization Tool]]
* [[Business Needs for Security Tool]]
* [[Threat Assessment Tool]]
** [[Media:GC ESA Enterprise Threat Assessment for Executives.pdf|GC ESA Enterprise Threat Assessment]] - This document provides a framework for the balanced consideration of system exposure, threat vectors, GC-wide threat scenarios, and common vocabulary. It provides a baseline of considerations that should be included when conducting departmental Threat and Risk Assessments. These considerations look at all aspects of IT systems security to ensure that information system security controls are not over or underspecified.
<br>
[[Category:Enterprise Security Architecture]]
{| style="border: 2px solid #000000; border-image: none;" width="1000px"
|-
! style="background: #e1caf7; color: black" width="20%" scope="col" " width="175px" | [[Government of Canada Enterprise Security Architecture (ESA) Program|ESA Program Overview]]
! style="background: #e1caf7; color: black" width="20%" scope="col" " width="125px" | [[ESA Backgrounder (Strategy)|ESA Foundation]]
! style="background: #e1caf7; color: black" width="20%" scope="col" " width="125px" | [[ESA Requirements|ESA Artifacts]]
! style="background: #e1caf7; color: black" width="20%" scope="col" " width="125px" | [[ESA Initiatives|ESA Initiatives]]
! style="background: #C495F0; color: black" width="20%" scope="col" " width="125px" | [[ ESA Tools and Templates]]
! style="background: #e1caf7; color: black" width="20%" scope="col" " width="125px" | [[GC ESA Artifact Repository|ESA Reference Materials]]
! style="background: #e1caf7; color: black" width="20%" scope="col" " width="100px" | [[ESA Glossary| Glossary]]
|}
{| style="border-bottom: #000000 2px solid; border-left: #000000 2px solid; border-right: #000000 2px solid" width="1000px"
|-
! style="background: #9a9af8; color: black" width="14%" scope="col" colspan="2" | [[ESA Tools|Tools]]
! style="background: #c2c2fa; color: black" width="14%" scope="col" | [[ESA Template Guides|Templates]]
|}
{| style="border-bottom: #000000 2px solid; border-left: #000000 2px solid; border-right: #000000 2px solid" width="1000px"
|-
! style="background: #969696; color: black" width="25%" scope="col" | [[Security Categorization Tool]]
! style="background: #d7d7d7; color: black" width="25%" scope="col" | [[Business Needs for Security Tool]]
! style="background: #d7d7d7; color: black" width="25%" scope="col" | [[Threat Assessment Tool]]
|}
</div></div>{{TOCright}}
== Introduction ==
To facilitate the integration of security into existing business practices and processes, a set of tools and templates have been developed to support practitioners when implementing their IT security risk management activities.
The following tools are currently available:
* [[Security Categorization Tool]]
* [[Business Needs for Security Tool]]
* [[Threat Assessment Tool]]
** [[Media:GC ESA Enterprise Threat Assessment for Executives.pdf|GC ESA Enterprise Threat Assessment]] - This document provides a framework for the balanced consideration of system exposure, threat vectors, GC-wide threat scenarios, and common vocabulary. It provides a baseline of considerations that should be included when conducting departmental Threat and Risk Assessments. These considerations look at all aspects of IT systems security to ensure that information system security controls are not over or underspecified.
<br>
[[Category:Enterprise Security Architecture]]
