OGEA-103: TOGAF Enterprise Architecture Combined Part 1 and Part 2 Exam

Overview

You are employed as an Enterprise Architect, reporting to the Chief Enterprise Architect, at a technology company. The company uses the TOGAF standard as the method and guiding framework for its Enterprise Architecture (EA) practice.

The nature of the business means that the data and information stored on the company systems is the company's major asset and is highly confidential. Company employees travel frequently for work and need to communicate over public infrastructure. They use message encryption, secure internet connections through Virtual Private Networks (VPNs), and other standard security measures. The company has provided computer security awareness training for all staff. However, despite good education and system security, there remains a need to rely on third-party suppliers for infrastructure and software.

The Chief Security Officer (CSO) has observed an increase in ransomware (malicious software used in ransom demands) attacks on companies with a similar profile. The CSO recognizes that no matter how much is spent on education and support, the company could still be the victim of a significant attack that could completely lock them out of their important data.

A risk assessment has been completed, and the company has investigated cyber insurance that covers ransomware. The cost of this insurance is very high. The CTO recently saw a survey that said 1 out of 4 businesses that paid ransoms could not get their data back, and almost the same number were able to recover the data without paying. The CTO has decided not to obtain cyber insurance to cover ransom payment.

The Chief Technology Officer (CTO) is the sponsor of the EA project. The practice uses an iterative approach for its architecture development. This has enabled the decision makers to gain valuable insights into the different aspects of the business.