Here an attempt has been made to discuss about CARTA (Continuous Adaptive Risk and Trust Assessment) suggested by Gartner and Dynamic Trust Management in Organic Networks (ON). The twin concepts behind CARTA and the three phases where CARTA can be used in IT security has been discussed. Here Organic Network (ON) and its Dynamic Trust Management method has been briefly stated. Here the feasibility of both CARTA and Dynamic Trust Management in ON has been stated in a tabular form for the convenience of the reader.
In this work an attempt has been made to discuss about CARTA (Continuous Adaptive Risk and Trust Assessment) and Dynamic Trust Management in Organic Networks (ON). The twin concepts behind CARTA and the three phases where CARTA can be used in IT security has been discussed. Here Organic Network (ON) and its Dynamic Trust Management method has been briefly stated. Here the feasibility of both CARTA and Dynamic Trust Management in ON has been stated in a tabular form for the convenience of the reader. Finally the topic is concluded and important points stated.
CARTA is a new approach introduced by Gartner for security and risk management. As per Gartner, CARTA (Continuous Adaptive Risk and Trust Assessment) is vital to stay competitive with emerging business opportunities. The key is to apply philosophy across the business from DevOps to external partners.
Table of Contents
- Summary
- Introduction
- CARTA
- Organic Network
- Dynamic trust Management in ON
- Comparison
- Seven Imperatives to adapt CARTA Approach
- Conclusion
Objectives and Key Themes
This work aims to explore the synergy between Continuous Adaptive Risk and Trust Assessment (CARTA) and Dynamic Trust Management within Organic Networks (ON). It examines the core principles of CARTA, its three phases of application in IT security, and introduces the concept of ON and its dynamic trust management approach. The feasibility of integrating both CARTA and Dynamic Trust Management in ON is analyzed. Finally, the paper proposes seven imperatives for adopting a CARTA strategic approach and suggests a high-level model for implementation.
- CARTA's core principles and their application in IT security
- The characteristics and functionality of Organic Networks (ON)
- Dynamic Trust Management within ON and its mechanisms
- A comparative analysis of CARTA and Dynamic Trust Management in ON
- Imperatives for adopting a CARTA strategic approach
Chapter Summaries
Introduction: This chapter introduces CARTA (Continuous Adaptive Risk and Trust Assessment), a Gartner-proposed approach to security and risk management, emphasizing its importance for competitiveness in emerging business opportunities. It highlights the need for a business-wide application of CARTA's philosophy, extending from DevOps to external partnerships. The chapter lays the groundwork for the subsequent discussion on CARTA's core principles and its integration with Dynamic Trust Management in Organic Networks.
CARTA: This section delves into the twin core concepts of CARTA: the continuous assessment of systems and devices for risk and trust, and the granting of just-enough trust to users based on continuous verification and behavioral assessment. The dynamic nature of trust, adapting to contextual values, is also highlighted. The chapter further explains Gartner's three phases of IT security where CARTA can be applied: Run, Plan, and Build.
Organic Network: This chapter defines Organic Networks (ON) as next-generation networks inheriting key features from Organic IT. It details these features: self-configuration, adaptivity, self-distribution, self-organization, self-healing, automatic parallelization, self-protection, and accounting. These characteristics emphasize the network's autonomous and resilient nature, crucial for its operation in diverse and unpredictable environments.
Dynamic trust Management in ON: This section explores the principles of dynamic trust management within Organic Networks. It emphasizes the need for decentralized and adaptive management, scalability, interoperability, and authentication. The chapter introduces a proposed dynamic trust management method where trust values are updated based on node performance, focusing on transaction information and individual node trust levels rather than recommendations or certificates. Node identification and registration processes are detailed, along with multi-level network management policies.
Comparison: This chapter presents a comparison between CARTA and the Dynamic Trust Management method in ON, contrasting their approaches to security and trust management within different network environments. Specific examples are provided to highlight the differences in their implementation and functionalities, offering a clearer understanding of their strengths and weaknesses in respective contexts.
Keywords
CARTA, Continuous Adaptive Risk and Trust Assessment, Dynamic Trust Management, Organic Networks, IT Security, Risk Management, Trust, Authentication, Authorization, Network Security, Self-Organization, Adaptivity, Decentralized Systems.
Frequently Asked Questions: A Comprehensive Language Preview
What is the main topic of this document?
This document explores the synergy between Continuous Adaptive Risk and Trust Assessment (CARTA) and Dynamic Trust Management within Organic Networks (ON). It analyzes the core principles of CARTA, its application in IT security, and introduces the concept of ON and its dynamic trust management approach. The feasibility of integrating both CARTA and Dynamic Trust Management in ON is analyzed, and the document proposes seven imperatives for adopting a CARTA strategic approach.
What is CARTA and how does it work?
CARTA (Continuous Adaptive Risk and Trust Assessment) is a Gartner-proposed approach to security and risk management. It involves continuously assessing systems and devices for risk and trust, granting only the necessary level of trust based on continuous verification and behavioral assessment. Trust dynamically adapts to contextual values. The document outlines Gartner's three phases of IT security where CARTA can be applied: Run, Plan, and Build.
What are Organic Networks (ON)?
Organic Networks (ON) are defined as next-generation networks inheriting key features from Organic IT. These features include self-configuration, adaptivity, self-distribution, self-organization, self-healing, automatic parallelization, self-protection, and accounting. These characteristics highlight the network's autonomous and resilient nature, crucial for operation in diverse and unpredictable environments.
How does Dynamic Trust Management work within Organic Networks?
Dynamic Trust Management in ON necessitates decentralized and adaptive management, scalability, interoperability, and authentication. The document proposes a method where trust values are updated based on node performance, focusing on transaction information and individual node trust levels. Node identification and registration processes are detailed, along with multi-level network management policies.
How does this document compare CARTA and Dynamic Trust Management in ON?
The document provides a comparison between CARTA and the Dynamic Trust Management method in ON, contrasting their approaches to security and trust management within different network environments. Specific examples highlight the differences in their implementation and functionalities, showcasing their strengths and weaknesses in respective contexts.
What are the key takeaways or imperatives for adopting a CARTA strategic approach?
The document proposes seven imperatives for adopting a CARTA strategic approach (although the specifics of these imperatives are not detailed in this preview). It also suggests a high-level model for implementation (details not provided in this preview).
What are the key themes explored in this document?
Key themes include CARTA's core principles and application in IT security; the characteristics and functionality of Organic Networks (ON); Dynamic Trust Management within ON and its mechanisms; a comparative analysis of CARTA and Dynamic Trust Management in ON; and imperatives for adopting a CARTA strategic approach.
What are the keywords associated with this document?
CARTA, Continuous Adaptive Risk and Trust Assessment, Dynamic Trust Management, Organic Networks, IT Security, Risk Management, Trust, Authentication, Authorization, Network Security, Self-Organization, Adaptivity, Decentralized Systems.
- Quote paper
- Manisha Kumari Deep (Author), 2018, Feasibility Study between Continuous Adaptive Risk and Trust Assessment and Organic Networks, Munich, GRIN Verlag, https://www.grin.com/document/411900
