The traditional approach to business information security management comprises policies and procedures which the business implements through various practices and controls. For small businesses such an approach is often impractical due to its complexity or because of a lack of resources.
An information architecture is the structural model in which a business carries out all of its daily data processing activity. By establishing architectures which inherently provide fundamental security features, businesses can focus on their core business activities.
The model-based approach provides simple, pragmatic advice together with examples showing how the models can easily be implemented using any preferred platform (e.g. Microsoft Windows or Apple MacOS.)