Merge Security Management Functions. There are some risks associated with this architecture and the migration strategy. The architecture should be extensible to non-web applications. Reliance on transport layer security protocols. Emerging security protocols that provide security services at other layers, such as the network and application layers, will be evaluated and added to the UMS security architecture if appropriate.
Architecture is based on new technology.
The phased migration strategy allows UMS to build experience with this technology while the technology is maturing. The architecture should not be affected by changes in availability or form of encryption algorithms. This report also includes a security organizational structure, security policy improvements, and a number of improvements to the existing UMS security posture that will be complementary to the migration to a new security architecture. A document structure is established to provide a means of codifying the security policies and standards which drive the security program. Finally, this report contains prioritized actions hat will enhance the current security posture and complement the development of new, unified security services.