Kalani Kirk Hausman
Susan L. Cook
Learn to:
• Create an Enterprise IT strategy
that meets business objectives
• Work with each layer of the
technology stack
• Support organizational structure
and processes
• Develop an action plan for
implementation
IT Architecture
Making Everything Easier!
™
Open the book and find:
• Tasks, roles, and tools of IT
architecture
• Risk and compliance issues for
management
• Tips for reducing complexity
• Identity and access management
strategies
• Effective communication methods
• How to plan for the mobile
enterprise
• When green is profitable
• What to consider when planning
technology updates
Kalani Kirk Hausman is a specialist in enterprise architecture, security,
information assurance, business continuity, and regulatory compliance.
Susan L. Cook is a Senior IT Policy and Security Programs Administrator

• Increase technology’s value — through virtualization, high-
performance computing, Green IT strategies, and other practices
• Keep your guard up — create effective disaster recovery solutions
and develop a sound game plan against the ever-changing threats
to interconnected systems
IT Architecture
Hausman
Cook
spine=.72”
www.it-ebooks.info
spine=.72”
Mobile Apps
There’s a Dummies App for This and That
With more than 200 million books in print and over 1,600 unique
titles, Dummies is a global leader in how-to information. Now
you can get the same great Dummies information in an App. With
topics such as Wine, Spanish, Digital Photography, Certification,
and more, you’ll have instant access to the topics you need to
know in a format you can trust.
To get information on all our Dummies apps, visit the following:
www.Dummies.com/go/mobile from your computer.
www.Dummies.com/go/iphone/apps from your phone.
Start with FREE Cheat Sheets
Cheat Sheets include
• Checklists
• Charts
• Common Instructions
• And Other Good Stuff!
Get Smart at Dummies.com
Dummies.com makes your life easier with 1,000s

01_554234-ffirs.indd ii01_554234-ffirs.indd ii 10/1/10 9:35 PM10/1/10 9:35 PM
www.it-ebooks.info
by Kalani Kirk Hausman
and Susan L. Cook
IT Architecture
FOR
DUMmIES
‰
01_554234-ffirs.indd iii01_554234-ffirs.indd iii 10/1/10 9:35 PM10/1/10 9:35 PM
www.it-ebooks.info
IT Architecture For Dummies
®

Published by
Wiley Publishing, Inc.
111 River Street
Hoboken, NJ 07030-5774
www.wiley.com
Copyright © 2011 by Wiley Publishing, Inc., Indianapolis, Indiana
Published by Wiley Publishing, Inc., Indianapolis, Indiana
Published simultaneously in Canada
No part of this publication may be reproduced, stored in a retrieval system or transmitted in any form or
by any means, electronic, mechanical, photocopying, recording, scanning or otherwise, except as permit-
ted under Sections 107 or 108 of the 1976 United States Copyright Act, without either the prior written
permission of the Publisher, or authorization through payment of the appropriate per-copy fee to the
Copyright Clearance Center, 222 Rosewood Drive, Danvers, MA 01923, (978) 750-8400, fax (978) 646-8600.
Requests to the Publisher for permission should be addressed to the Permissions Department, John Wiley
& Sons, Inc., 111 River Street, Hoboken, NJ 07030, (201) 748-6011, fax (201) 748-6008, or online at http://
www.wiley.com/go/permissions.
Trademarks: Wiley, the Wiley Publishing logo, For Dummies, the Dummies Man logo, A Reference for the

01_554234-ffirs.indd iv01_554234-ffirs.indd iv 10/1/10 9:35 PM10/1/10 9:35 PM
www.it-ebooks.info
About the Authors
Kalani Kirk Hausman is employed as an Assistant Commandant at Texas A&M
University and specializes in enterprise architecture, security, information
assurance, business continuity, and regulatory compliance. His background
includes varied topics from digital forensics and WMD response, pandemic
response planning, technology audit practices, and IT governance strategies.
His experience includes application design, data resource management, net-
work architecture, server and storage virtualization, strategic technology
modernization, network and backup centralization, research computing,
and large network BCP/DR planning. With a Master’s degree in Information
Technology, Kirk has served as a senior research scientist in the  elds of
cyber terrorism, cybercrime, and cyber security, and he regularly lectures
on uses of technology in education, solutions for persons with disabling
conditions, and strategic architectural planning to improve enterprise
ef ciencies. Kirk’s professional certi cations include the CISSP, CGEIT,
CRISC, CISA, CISM, and CCP together with a wide assortment of technology-
and regulatory-speci c designations.
Susan L. Cook is a Senior IT Policy and Security Programs Administrator at
Texas A&M University, specializing in enterprise risk assessment and compli-
ance. She has a master’s degree in Information Technology, additional graduate
work in Security Management, and more than a decade of experience in the  eld.
She has also worked as a compliance auditor in the  nancial industry and as a
licensed private investigator.
01_554234-ffirs.indd v01_554234-ffirs.indd v 10/1/10 9:35 PM10/1/10 9:35 PM
www.it-ebooks.info
01_554234-ffirs.indd vi01_554234-ffirs.indd vi 10/1/10 9:35 PM10/1/10 9:35 PM
www.it-ebooks.info
Dedication

Composition Services
Senior Project Coordinator: Kristie Rees
Layout and Graphics: Carl Byers, Erin Zeltner
Proofreaders: Tricia Liebig, Lindsay Littrell
Indexer: BIM Indexing & Proofreading Services
Publishing and Editorial for Technology Dummies
Richard Swadley, Vice President and Executive Group Publisher
Andy Cummings, Vice President and Publisher
Mary Bednarek, Executive Acquisitions Director
Mary C. Corder, Editorial Director
Publishing for Consumer Dummies
Diane Graves Steele, Vice President and Publisher
Composition Services
Debbie Stailey, Director of Composition Services
01_554234-ffirs.indd viii01_554234-ffirs.indd viii 10/1/10 9:35 PM10/1/10 9:35 PM
www.it-ebooks.info
Contents at a Glance
Introduction 1
Part I: Developing the Architecture 7
Chapter 1: Planning for Enterprise Realignment 9
Chapter 2: Exploring Tasks, Roles, and Tools 17
Chapter 3: Pondering Platform Pros and Cons 29
Part II: Defining the Role of IT Architecture 41
Chapter 4: Reducing Complexity through Standardization and Consolidation 43
Chapter 5: Planning Enterprise Information Security 65
Chapter 6: Complying with Mandates and Managing Risk 81
Part III: Creating an Enterprise Culture 93
Chapter 7: Developing Identity and Access Management Strategies 95
Chapter 8: Developing a Network Culture through Collaboration Solutions 113
Chapter 9: Reviewing Communication Methods 127

Part I: Developing the Architecture 3
Part II: De ning the Role of IT Architecture 3
Part III: Creating an Enterprise Culture 3
Part IV: Developing an Extended Network Enterprise 4
Part V: Obtaining Value beyond the Basic Enterprise 4
Part VI: Protecting the Enterprise 4
Part VII: The Part of Tens 4
Icons Used in This Book 4
Where to Go from Here 5
Part I: Developing the Architecture 7
Chapter 1: Planning for Enterprise Realignment . . . . . . . . . . . . . . . . . . .9
De ning an Enterprise 9
Finding the Best Solution 10
Providing Leadership 10
In the Traditional Enterprise, Everything May Be Independent 11
Too many resource silos 12
Too many platforms 12
Too many people with root access 13
In the Modern Enterprise, Everything Is Connected 13
De ning Success 14
Using Maturity Models 15
Preventing Failure 15
Chapter 2: Exploring Tasks, Roles, and Tools. . . . . . . . . . . . . . . . . . . . .17
Examining Common Enterprise Architecture Tasks 17
Identifying data requirements 18
Integrating existing resources 18
De ning technical standards 18
Justifying changes 19
Communicating effectively 19
02_554234-ftoc.indd xi02_554234-ftoc.indd xi 10/1/10 9:36 PM10/1/10 9:36 PM

Planning for Consolidation 47
Applying the 80/20 rule 48
Finding value 49
Planning for technology end of life 49
Maintaining the help desk 51
Consolidating skills 51
Addressing Concerns about Standardization 53
Reduced functionality 53
Decreased productivity 54
Incompatibility with existing applications 54
Risk of technology monoculture 55
Preparing for opposition 55
02_554234-ftoc.indd xii02_554234-ftoc.indd xii 10/1/10 9:36 PM10/1/10 9:36 PM
www.it-ebooks.info
xiii
Table of Contents
Consolidating the Data Center 56
Identifying the bene ts 57
Reducing complexity through virtualization 59
Implementing desirable redundancy 60
Planning the centralized facility 61
Automating the Data Center 61
Patches and updates 62
Image-based deployment 62
Backup solutions 63
Chapter 5: Planning Enterprise Information Security . . . . . . . . . . . . . .65
Protecting Enterprise Data 66
Creating a Security Plan 67
Design a workable program 68
Use a layered framework 68

IT Architecture For Dummies
xiv
Part III: Creating an Enterprise Culture 93
Chapter 7: Developing Identity and
Access Management Strategies. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .95
Introducing Identity and Access Management (IAM) 95
Identifying Users 96
Something users know: Password 97
Something users have: Access token 98
Something users are: Biometric identi cation 99
Something users do: Behavioral identi cation 101
Authenticating Users 102
Authentication standards 102
Directory 103
Central authentication 103
Federated authentication 104
Single sign-on 104
Cross-realm authentication 105
Authorizing Access 106
File and database rights 106
Service rights 107
Application rights 107
Creating an Identity Management Strategy 108
Reviewing technologies 108
Assigning aggregate rights 108
Meeting legal requirements 108
Keeping it simple 109
Finding bene ts 109
Implementing an Identity Management Solution 110
Identi cation 110

Text messaging 132
Community Sites 132
Blogs 133
Discussion boards and forums 133
Wikis 134
Conferencing 135
Videoconferencing 135
Virtual reality 136
Voice over Internet protocol (VoIP) 137
Web conferencing 137
Broadcast Communications 138
Podcasting 139
Really Simple Syndication (RSS) 139
Streaming media 140
Part IV: Developing an Extended
Network Enterprise 141
Chapter 10: Managing Data Storage. . . . . . . . . . . . . . . . . . . . . . . . . . . .143
Determining Storage Requirements 143
Conducting a storage survey 144
Interviewing personnel 145
Identifying Important Data Categories 145
File repositories 145
File versioning 146
Databases 146
Multimedia 147
E-mail 147
Logging 148
Virtual servers 149
Creating a Storage Policy 149
Addressing speci c storage topics 150

Tablets 176
Cell phones 177
Bluetooth 177
Long-range wireless 177
Exploring Mobile Computing in the Enterprise 178
Device interaction 179
Boosters and dead zones 179
Going Mobile beyond the Enterprise 182
Navigation 182
Connectivity and bandwidth 183
VPN and SSL access 183
Remote desktops 184
Power 184
Planning for SmartPhone Computing 186
Familiarity 186
Planning ahead 186
Device locking 187
On-device encryption 187
Kill pills 188
Laptop LoJack 188
02_554234-ftoc.indd xvi02_554234-ftoc.indd xvi 10/1/10 9:36 PM10/1/10 9:36 PM
www.it-ebooks.info
xvii
Table of Contents
De ning Mobile Access Policy 189
Mobile computing policies 190
Remote access policies 190
Wireless use policies 191
Part V: Obtaining Value beyond the
Basic Enterprise 193

Telework and telecommuting 220
Data center location 220
Energy tax credits 221
ENERGY STAR 221
Considering Alternative Energy 222
Reducing Consumables 223
02_554234-ftoc.indd xvii02_554234-ftoc.indd xvii 10/1/10 9:36 PM10/1/10 9:36 PM
www.it-ebooks.info
IT Architecture For Dummies
xviii
Selecting Green Hardware 224
Con guring Green Settings 225
Virtualizing Hardware 226
Ensuring Green Disposal 226
Part VI: Protecting the Enterprise 229
Chapter 16: Planning Technology Updates . . . . . . . . . . . . . . . . . . . . . .231
Reviewing Hardware Update Strategies 231
Keeping systems until they fail 232
Using de ned replacement cycles 232
Riding the cutting edge 236
Employing trickle-down replacement 237
Relying on surplus technology 238
Using technology as a reward 238
Replacing technology in an ad-hoc manner 239
Planning for Sub-System Updates 240
Upgrading components 240
Updating  rmware 241
Updating device drivers 241
Planning Software Updates 242
Understanding the need for testing 242

Updating the plan 267
Using Alternative Sites 268
Selecting the right type of site 268
Managing the alternative site 269
Communicating During a Disaster 270
Part VII: The Part of Tens 273
Chapter 19: Ten Challenges for Redesigning
an Existing Enterprise . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .275
Dealing with Lack of Executive Support 275
Handling Opposition to Change 276
Deciding on a Platform: Open Source versus
Closed Source/Commercial Off-the-Shelf 276
Eliminating Resource Silos 277
Integrating Legacy Systems 277
When Change Doesn’t Happen Fast Enough 278
Maintaining Compliance throughout the Process 278
Dealing with Separate Revenue Streams 279
Supporting Personally Owned Equipment 279
Know Your Limits 280
Chapter 20: Ten “Low-Hanging Fruit” Opportunities. . . . . . . . . . . . . .281
Eliminate Resource Silos 281
Standardize the Workstation Environment 282
Create a Centralized Data Center 282
Consolidate Resources Already Within the Data Center 283
Implement Automated Update/Patch Management Solutions 283
Implement Enterprise-Level Anti-Malware Solutions 284
Use Risk Assessment Results to Find Easily Fixed Vulnerabilities 285
Schedule Workstation Replacement 285
Implement Virtualization 286
Reduce Cost from Consumables by

nature of enterprise architecture realignment. We hope the information we
provide encourages you to look around your own enterprise and find some
low-hanging fruit opportunities for quick savings or other proof of value to
help develop executive support for additional changes. Few enterprises lack
such opportunities because technology and its uses tend to fall into stable
practices users describe as “the way we’ve always done it” rather than
changing to adopt the best or most efficient ways.
About This Book
This book is not a checklist for efficiency, although it does present some
strategies that may improve cost and operational efficiencies. It is not a step-
by-step guide that will lead to a secure and risk-free network, although it pro-
vides some examples of projects that may help to reduce risk. Instead, this
book introduces you to enterprise architectural planning from the theoretical
viewpoint and then drills down to the meat and bones of enterprise technolo-
gies and functions.
03_554234-intro.indd 103_554234-intro.indd 1 10/1/10 9:37 PM10/1/10 9:37 PM
www.it-ebooks.info
2
IT Architecture For Dummies
You should recognize elements of your own environment reflected here and
take advantage of my past experience in dealing with challenges faced during
realignment, consolidation, and other re-engineering practices within an
extended enterprise network. Although the content of this book is suitable
for globally distributed enterprises of significant scale, the topics covered are
useful for resource and availability planning in networks of any size.
Conventions Used in This Book
This book is, after all, a reference book, and we expect that using conven-
tions will make it easier for you to find exactly what you’re looking for by
quickly scanning through chapters. The conventions for this book are as
follows:

users and support staff alike.
Finally, we assume that you need help identifying areas of focus and strate-
gies for sustaining your enterprise year to year in the face of constant tech-
nological evolution. We trust this will spark many ideas you can leverage
toward management of your extended enterprise. By starting at the theoreti-
cal level and progressing through the book into ever-more-direct technology
approaches and strategies, you can develop a better framework for evalua-
tion of your own enterprise setting.
How This Book Is Organized
We divide this book into several parts based on topic. The following sections
describe what you can expect to find in each part.
Part I: Developing the Architecture
Part I establishes the fundamental concepts of what defines an enterprise
and then examines the value provided by this definition.
Part II: Defining the Role
of IT Architecture
Part II addresses the identification of challenges and advantages in enterprise
reconfiguration. It further examines the need to prove value to the organiza-
tion as a result of change.
Part III: Creating an Enterprise Culture
Part III discusses the fundamental aspects of identity management, develop-
ing an enterprise culture, and specific collaborative options that can be used
to reinforce this cultural evolution.
03_554234-intro.indd 303_554234-intro.indd 3 10/1/10 9:37 PM10/1/10 9:37 PM
www.it-ebooks.info