Using Wardley Maps to Understand Security's Landscape and Strategy
•
16 likes•3,686 views
This document provides an overview of Wardley Maps, which are used to understand an organization's security landscape and strategy. It describes how to create Wardley Maps by starting with user needs, adding capabilities, and mapping evolution over time. Various examples are given of mapping security topics like threat landscapes, compliance, and cyber attacks. Community resources for collaborating and learning more about Wardley Mapping are also provided.
Recommended
More Related Content
What's hot
What's hot (20)
Similar to Using Wardley Maps to Understand Security's Landscape and Strategy
Similar to Using Wardley Maps to Understand Security's Landscape and Strategy (20)
More from Dinis Cruz
More from Dinis Cruz (20)
Recently uploaded
Recently uploaded (20)
Using Wardley Maps to Understand Security's Landscape and Strategy
- 1. @DinisCruz Using Wardley Maps to Understand Security's Landscape and Strategy V0.9, Nov 2019
- 3. @DinisCruz My journey started in May 2018
- 4. @DinisCruz Wardley Map of Wardley Maps
- 6. @DinisCruz Key Concepts, Sun Tzu and OODA loop
- 7. @DinisCruz Value chain mapped to Evolution
- 9. @DinisCruz Start with the users and their needs
- 13. @DinisCruz Evolution, Climatic Patterns and Doctrine
- 14. @DinisCruz 4 types of Evolution
- 15. @DinisCruz Zooming in on Evolution
- 16. @DinisCruz Zooming in even more
- 17. @DinisCruz From Genesis to Commodity
- 20. @DinisCruz Doctrine principles - Phase 1
- 21. @DinisCruz Doctrine principles - Phase 2
- 22. @DinisCruz Doctrine principles - Phase 3
- 23. @DinisCruz Doctrine principles - Phase 4
- 26. @DinisCruz Map your competition (Doctrine)
- 27. @DinisCruz PST (Pioneers, Settlers, Town planners)
- 28. @DinisCruz Organise Teams using PST
- 30. @DinisCruz Security Maps that are not maps
- 31. @DinisCruz Security MindMap (where to focus?)
- 33. @DinisCruz But in Maps space has meaning
- 34. @DinisCruz Merge Maps (and discover duplication)
- 36. @DinisCruz Map Duplication and Bias
- 39. @DinisCruz Mapping a cup of tea
- 40. @DinisCruz Understanding P&L and cash flows
- 41. @DinisCruz Example: Mapping a Digital Product
- 42. @DinisCruz Start with Value Chain https://medium.com/@erik_schon/the-art-of-strategy-811c00a96fad
- 43. @DinisCruz Use Evolution to turn Value Chain into a Map
- 44. @DinisCruz Mapping products available in market
- 45. @DinisCruz Capture movement and next steps
- 46. @DinisCruz Example: User need ‘Find right home’
- 47. @DinisCruz From value Chain to map https://medium.com/@chrisvmcd/mapping-maturity-create-context-specific-maturity-models-with-wardley-maps-informed-by-cynefin-37ffcd1d315
- 51. @DinisCruz Mapping ‘Who Says Elephants can’t dance’ book https://medium.com/@juliusgb2k/wardley-maps-an-illustration-from-gerstners-book-9ff29a244e8a
- 52. @DinisCruz State of IBM in mid-1990
- 53. @DinisCruz Using Doctrine to understand Lou’s actions
- 54. @DinisCruz Decisions and Actions in Map
- 55. @DinisCruz Areas of doctrine affected by actions
- 58. @DinisCruz GDS* Case study * Government Digital Services
- 59. @DinisCruz Start with User needs https://hackernoon.com/rebooting-gds-96b1595096fa
- 62. @DinisCruz Challenge and Question (why are we building this?)
- 63. @DinisCruz Focus on Doctrine (Phase I)
- 64. @DinisCruz Break into small contracts/projects
- 66. @DinisCruz Understand what works on each area
- 67. @DinisCruz Pioneers, Settlers and Town Planners
- 68. @DinisCruz Example: Blockbuster vs Netflix
- 69. @DinisCruz Mapping blockbuster (addition to late fees)
- 70. @DinisCruz Mapping Netflix, start with Value Chain
- 72. @DinisCruz Netflix strategy: Productize Content Creation
- 74. @DinisCruz Commodities creates new opportunities
- 76. @DinisCruz Key Pattern 1. Create Platform 2. View what users are doing in your Platform a. What they are moving from Genesis to Custom Build 3. Productize and Commoditize that 4. Rise and Repeat ● For example: ○ EC2 -> Lambda ○ EC2 -> Lambda -> API Gateway automations ○ EC2 -> MySQL as a Service -> Serverless MySQL ○ EC2 -> Elastic Container Service (ECS) -> Fargate ○ EC2 -> LightSail
- 80. @DinisCruz NSO (National Statistic Offices) https://drive.google.com/file/d/1syRvOQiIc-cMri3Dq4YQtRa9502wc4cS/edit
- 82. @DinisCruz Mapping a Manager’s activities https://www.quora.com/What-problems-does-serveless-development-AWS-Lambda-solve/answer/Slobodan-Stojanovi%C4%87
- 86. @DinisCruz SOC
- 87. @DinisCruz Mapping: Handling an Security event
- 90. @DinisCruz PCI Audit (before and after)
- 92. @DinisCruz
- 94. @DinisCruz MPC Submap (MultiParty Computation)
- 95. @DinisCruz Mapping a Security Champion Programme
- 97. @DinisCruz Mapping Cloud Security (SecOps)
- 99. @DinisCruz Mapping Security Domain Knowledge
- 100. @DinisCruz Mapping SOC Analyst activity
- 101. @DinisCruz Mapping Security Testing automation
- 102. @DinisCruz Mapping Endpoint Security Compliance
- 103. @DinisCruz Automatic Generation of Maps
- 104. @DinisCruz Slack Bot
- 105. @DinisCruz Jira and Jupyter Notebooks
- 106. @DinisCruz Using Jira to capture data
- 108. @DinisCruz See also Cynefin Framework https://academic.oup.com/heapro/article/28/1/73/576131
- 109. @DinisCruz Cynefin and Wardley Maps
- 110. @DinisCruz Community
- 114. @DinisCruz Thanks