ISSAP case studies

ISSAP · Put your knowledge to work in context.

The ISSAP (Information Systems Security Architecture Professional) is an advanced ISC2 certification for security architects. ISC2 describes it as an ideal credential for a chief security architect, analyst, or professionals with similar responsibilities - people whose work sits between the C-suite and the implementation of the security program. The ISSAP case studies are 5 cases and about 6,228 words.

Reconciling Two Risk Registers After a Health System Merger

Northbridge Health, a 4.2 million-member health insurer, closed its acquisition of a three-hospital regional provider nine months ago. The merged entity now runs two enterprise risk registers.

1,227 words, about 6 min 2

Choosing an Architecture Method for IT/OT Convergence With Unpatchable Assets

Aurora Components runs 14 manufacturing plants whose control networks were historically air-gapped at Purdue levels 0 through 3. A corporate program now streams plant telemetry to Azure for predictive maintenance, with a board mandate to have all 14 plants connected within 12 months and a stated goal of reducing unplanned downtime, not producing compliance artifacts.

1,179 words, about 6 min 3

Multi-Cloud Kubernetes for Card Authorization Under a Hard Latency Budget

Meridian Payments is moving its card-not-present authorization service from two owned data centers to Kubernetes clusters in two public clouds, one primary region and one for failover. Peak load is 12,000 transactions per second and the p99 end-to-end budget is 40 milliseconds, of which roughly 9 milliseconds is currently consumed by network hops inside the data center.

1,279 words, about 6 min 4

Consolidating Nine Identity Providers While the Mainframe Refuses to Change

Calder Industrial has 48,000 employees and 220,000 external dealer and customer identities, accumulated through acquisitions that left nine identity providers in production: two Active Directory forests, Active Directory Lightweight Directory Services, Okta, Ping, two bespoke LDAP directories, and three ADFS farms. Order entry runs on a mainframe using RACF, and finance runs on SAP ECC.

1,276 words, about 6 min 5

Architecture Review Board Decision on a Mortgage Platform With a Data Residency Problem

Summit Lending will cut over a new cloud-native mortgage origination platform in seven weeks. The design review is scheduled for two weeks from now.

1,267 words, about 6 min