Predrag (Pez) Zivic, CISSP, CISA, ISO is Senior Risk Architect for Loblaw, Canada. A Senior Risk, Security and Privacy Strategist with over 24 years of related experience (over 15 years in privacy, risk and security). Working for Fortune 1000 clients and Government, Predrag has designed security architectures and managed worldwide projects. He has presented on number of international security and privacy conferences and he has thaught CISSP courses at the AII institute.

Bob Steadman is the Senior Director, IT Security, Privacy and Compliance for Loblaw Companies Limited, Canada’s leading national grocery retailer and food distributor. Bob has combined his business training and background gained from over 26 years of experience in internal audit, system audit, information security, consulting and financial analysis. In his current role, Bob is contributing to the Loblaw journey of organizational change by successfully leading a number of security improvement initiatives.

Presentation

Building Reference Security Architecture

This presentation will demonstrate an approach on how to connect information security, privacy and compliance (ISPC hereinafter) guiding principles and framework with information technology. The approach involves creation of security reference architecture derived from corporate ISPC framework, guiding legislation, standards (such as ISO27001, NIST 800-53) and TOGAF enterprise architecture.

The presented approach will ensure that all ISPC areas are addressed and demonstrate traceability from the framework to conceptual, logical and physical security reference architecture.  The security reference architecture when developed could be provided to all projects and operations within the enterprise and should be used for all future implementations of security within any project in the enterprise.

return to program