Front cover - IBM Redbooks

2. To ensure that the potential vulnerabilities and exception conditions (i.e.,
perils) within IT business process flows are addressed in ways that are
consistent with the risk management objectives.
These objectives show the duality of security design: to support and assure
normal flows, as well as identify and account for all illicit flows and anomalous
events.
2.4.6 Business process model
Figure 2-11 on page 74 represents IT process flows for a generalized business
system. The process flows reflect the events and conditions in which information
assets are acted upon by processes that are invoked by users, or by processes
acting on behalf of users. The left arrow represents the model business flow
within a trusted environment, and the right arrow represents a more realistic view
of the business flow, where perils exist in the operating environment.
Chapter 2. Security methodologies 73