Last Minute Additions

Question 1

What do we mean by ‘increased security’ via EA?

Answer 1

Architecture provides clarity about data, its users, its owners and its systems - makes it easier to control and allow access

Question 2

What is the rough progression of developing an EA?

Answer 2

Develop guiding principles for architecture -> identify critical business and tech issues -> review and assess current IT developments -> identify technology to provide functions -> develop migration scenario

Question 3

What are some examples of critical business issues and contraints?

Answer 3

Helpline compromised & old; poor funding for IT , poor IT capability across senior management; business rapidly moving online

Question 4

What may result in insecure data?

Answer 4

Multiple systems and multiple data sources - difficult to ensure IS security

Question 5

Give examples of non-functional aspects of systems wrt. TA

Answer 5

Reliability, scalability, security

Question 6

What is meant by a distributed system?

Answer 6

One that is spanning one or more networked computers and locations

Question 7

The cloud acts as an online server of sorts - what umbrella technology makes up the cloud?

Answer 7

Virtual servers, ‘dark’ centres (fully automated), dynamic provisioning of software-defined components

Question 8

What are some examples of operational requirements when considering the architecture of a system?

Answer 8

Environment system integration, portability , maintainability, speed, capacity, availability and reliability, system value estimates, access control, encryption and authentication, virus control.

Question 9

Describe environmental requirements wrt. architectural considerations

Answer 9

Green IT - E-waste (old computers materials), energy consumption of data centres, paperless office;

Question 10

Describe cultural requirements wrt. architectural considerations

Answer 10

Centralised vs. local control/operation (cultural and political influence). language differences

Question 11

Describe legal requirements wrt. architectural considerations

Answer 11

Law and government regulations (jurisdiction/location of stored data)

Question 12

When does testing occur in waterfall idealogy?

Answer 12

Occurs in blocks of defined activity at specific stages

Question 13

Maintenance (support) of an IT system change can account for up to what percentage of budget

Answer 13

60-80%

Question 14

What does the support phase of SDLC involve?

Answer 14

Transition from development team to support team

Question 15

What does ITIL stand for, and what does it provide?

Answer 15

Information technology infrastructure library: provides set of practices for IT service management

Question 16

The information commissioner code of 2003 legally obliges companies to do what?

Answer 16

Nothing - not legal obligation, just recommendations (see other deck for what these are)

Question 17

When was the EU directive on security of network and information systems brought about, and what does it do?

Answer 17

2016 - aims to achieve a high common level of security of N&IS across the EU (improved cybersecurity measures at a national level, increased EU-level cooperation, risk management and incident report obligations)