A formalized architecture diagrams how to handle the changing threat and regulatory environments.

Every so often, something beastly crosses the desk of an enterprise security manager. Be it a digital disaster or a new regulatory mandate, these nasties have transformed a CISO's professional existence into a series of policy and process adjustments, and reallocations of resources.

Any measure of standardization and repeatability becomes a welcome ally in warding off the effects of a shift in the threat or regulatory environment.