QuestionQ120

VerifiedIntroduction to Applying the ADM

You are an Enterprise Architect working for an electric vehicle manufacturer. You are part of an Enterprise Architecture (EA) team with responsibilities across multiple divisions of the company. The company produces electric cars and battery systems. The company’s goal is to build the best technology and software platform to support self-driving cars.

An architecture to support strategy has already been completed, defining a long-term Target Architecture with a five-year roadmap. This has identified the need for a portfolio of projects over the next two years. The portfolio includes developing travel assistance systems using data collected from multiple vehicles on the road.

The design of the presentation and accessibility of different types of data that the company plans to offer through its platform appears to be challenging. It is important for the application portfolio to work securely with third-party cloud services and V2X (Vehicle-to-Everything) service providers across many countries in order to effectively manage large amounts of data. Stakeholders are especially concerned about the security of V2X. Regulations in various markets require that user privacy must always be protected, to prevent tracking and compiling of data that could reveal drivers’ journeys.

The company uses the TOGAF Standard as the basis for its Enterprise Architecture framework. Architecture development within the company uses the purpose-based EA Capability Model as described in the TOGAF Series Guide: A Practitioner’s Approach to Developing Enterprise Architecture Following the TOGAF® ADM. The EA team reports to the Chief Information Officer (CIO), who is the sponsor of the EA program.

The current phase of architecture development is focused on the Business Architecture, which needs to support the primary travel assistance services that the company plans to provide. These services will manage and process the data created by vehicles, paving the way for self-driving vehicles in the future.

You have been asked to outline the risk and security considerations to include in the current phase of architecture development.

Based on the TOGAF Standard, which of the following is the best answer?

Explanation

A security domain model groups assets that share a security level and policy, while also defining responsibility boundaries with external parties. When organizations share data or activities, the security federation’s scope and the security implications of contractual arrangements must be established. A risk assessment must also identify risks relevant to the particular data assets. This directly addresses secure cross-party V2X data sharing and privacy obligations.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!