The Role of a Security Consultant in the Architecture Design Process - Report Example

The study used a qualitative research design. Primary data was collected through semi-structured qualitative interviews. Secondary data was collected through document analysis. Data analysis was through the qualitative interpretive method. The study summarised into three: To prevent overspending on unnecessary security devices, to prevent risks of liability due to failure to comply with regulatory requirements, and most lasting, to ensure that all the security layers or components serve their objective as required.

These roles are fixed to the Defence in-depth theory and systems approach, as they make sure that the security architecture is designed to operate as part of the security system in order to holistically detect, delay, deter, and respond to security threats.IntroductionThe roles and responsibilities of security management professionals have expanded in scope since the 1990s parallel to the expansion of the private sector and the tendencies by firms to downsize, outsource, and adopt the technology (CISSP, 2012; Sennewald, 2012).

The rise in demand for security professional services has also been persistent since 9/11. While security consulting has grown, the roles of security professionals continue to remain unclear (Farah, 2004; Walek & Masar, 2013).Many organizations see a security professional be an individual tasked with recommending proper, cost-effective strategies to attain a wide range of security objectives, crime prevention, loss control, and investigative roles (Scholl et al, 2010). This is, however, insufficient.

Obviously, a rewarding dimension of security professionals is the opportunity to manage and control an organization’s security (Tsohou et al., 2015). The security professionals seek to ensure that threats and controls are in balance (Bogers et al., 2008).Designing secure system architecture and its implementation and application are costly, time-consuming, and complex processes that demand expertise and intervention of a security professional, who is the expert for a particular problem domain.