Enterprise�Architecture & �The future world

…

Edzo A. Botjes @ University of Utrecht�2024-06-18

Index.md

Objective of today / topics to tackle

Trends

Enterprise Architecture

Share insights

Open Dialogue

Intro (10m)

PESTEL (40m)

Enterprise Architecture (25m)

Bonus (20m)

2024-06 @ UU

Enterprise Architecture

3

ME

4

Multiple whitepapers�Thesis/IEEE ~6.000 reads�40+ Blogs�Quoted in Books and Theses

Consultancy for �7 Sectors,

40+ Clients,

50+ Assignments�Infra to business strategy

1992 - 2006 your IT guy

2006 - 2020 Sogeti

2021 - 2023 Xebia

2024 - Self Employed

PhD Student Cyber Resilience 2021 - tbd

MSc Enterprise Architecture 2020

BSc Business Information Systems 2006

ASc Computer Science 2003

Edzo Botjes

@Edzob

(.com, LinkedIn, Twitter)

Organisational Resilience

Antifragility Architect

Trusted Advisor

Cyber Resilience

Enterprise Security Architecture

Enterprise Architecture

Cyber Security & Cyber Resilience

Organization Transformation

2024-06 @ UU

Enterprise Architecture

5

Consultant @ Xebia�2021 - 2023

Consultant @ Sogeti�2006 - 2020

Internships�2005-2006

Edzo Botjes

@Edzob

(.com, LinkedIn, Twitter)

Organisational Resilience

Antifragility Architect

Trusted Advisor

2024-06 @ UU

Enterprise Architecture

6

ART

2024-06 @ UU

Enterprise Architecture

8

Organisations

YOU

2024-06 @ UU

Enterprise Architecture

PESTLE

PESTEL

Management > strategic management > Environmental scanning > Macro-Environment > PESTEL

https://www.flaticon.com/packs/election-13 created by Wichai.wi

https://www.flaticon.com/packs/business-dual-color-glyph-set-4 by popcornarts

https://www.flaticon.com/packs/economy-235 by Yuly Gutiérrez

https://www.flaticon.com/packs/financial-planning-18 by Dewi Sari

https://www.flaticon.com/packs/world-environment-day-5 by Freepik

https://www.flaticon.com/packs/actuary-4 by juicy_fish

https://libguides.ithaca.edu/pestel

https://www.worcester.ac.uk/documents/PESTLE-Analysis.pdf

https://en.wikipedia.org/wiki/PEST_analysis#Variants

https://en.wikipedia.org/wiki/Market_environment#Environmental_scanning

​

11

Political

Economical

Socio-cultural

Technological

Environmental

Legal

2024-06 @ UU

Enterprise Architecture

PESTEL - Exercise

Management > strategic management > Environmental scanning > Macro-Environment > PESTEL

12

Political

Economical

Socio-cultural

Technological

Environmental

Legal

Step 1 - group up (1 min)�Step 2 - individual 3 trend keywords per P.E.S.T.E.L (5 min = 45 sec per letter)

Step 3 - combine and group (5 min)

Step 4 - Elaborate for questions/ clarification (10 min)

Step 5 - Dot-Vote (3 pp) to determine top 3 per P.E.S.T.E.L (10 min)

Step 6 - Reflect as class (10 min)

2024-06 @ UU

Enterprise Architecture

Whiteboard

https://docs.google.com/spreadsheets/d/16toLmAeXukVylW1KP7E9qezwmOMwDk3yx0ri47H2ZWE

Google Spreadsheet

No login required. Free to edit

2024-06 @ UU

Enterprise Architecture

The business relevance

Increased EU (GDPR, NIS2, CRA & DORA, RED, MDR, PLD, DMA, DSA, …) and there is also US law, Executive Order, …

• At a glance: A guide to the EU’s new digital package January 2023 Guillaume Couneson
• https://www.linklaters.com/en/insights/blogs/digilinks/2022/november/eu---dga-data-act-nisd2-dsa---confused
• https://berthub.eu/articles/posts/eu-cra-secure-coding-solution/

These regulations address risk management and cyber security of the environment, supply chain and the internals of the organisation on people, process and technology level from also the people, process and technology perspective.

14

Hidden Slide

2024-06 @ UU

Enterprise Architecture

National Risk Assessment (NRA) 2022

By National Network of Safety and Security Analysts

https://www.government.nl/topics/security-strategy-for-the-kingdom-of-the-netherlands/documents/reports/2022/09/26/national-risk-assessment-of-the-kingdom-of-the-netherlands-2022

15

Hidden Slide

2024-06 @ UU

Enterprise Architecture

Gartner 2024 - Strategic Technology Trends

https://www.gartner.com/en/articles/gartner-top-10-strategic-technology-trends-for-2024

1. AI Trust, Risk and Security Management (AI TRiSM)
2. Continuous Threat Exposure Management (CTEM)
3. Sustainable Technology
4. Platform Engineering
5. AI-Augmented Development
6. Industry Cloud Platforms
7. Intelligent Applications
8. Democratized Generative AI
9. Augmented Connected Workforce
10. Machine Customers

16

Hidden Slide

2024-06 @ UU

Enterprise Architecture

S&P Global - Special Reports: Look-forward

https://www.spglobal.com/en/research-insights/special-reports/look-forward

https://www.spglobal.com/en/research-insights/market-insights/geopolitical-risk

17

Geopolitical Risk

Hidden Slide

2024-06 @ UU

Enterprise Architecture

European Strategy and Policy Analysis System

Welcome to 2030 - The mega trends

1. We are hotter
2. We are more, but where?
3. We live in cities
4. We continue to grow economically
5. We need more energy
6. We are highly connected
7. We are poly-nodal

https://ec.europa.eu/assets/epsc/pages/espas/chapter1.html

https://economy-finance.ec.europa.eu/economic-forecast-and-surveys/economic-forecasts/winter-2024-economic-forecast-delayed-rebound-growth-amid-faster-easing-inflation_en

18

Hidden Slide

2024-06 @ UU

Enterprise Architecture

Accenture Macro Foresight 2024

https://www.accenture.com/content/dam/accenture/final/accenture-com/document-2/Accenture-Strategy-Macro-Foresight-Brief-January-2024.pdf

19

Hidden Slide

2024-06 @ UU

Enterprise Architecture

BCG CEO Outlook 2023

https://www.bcg.com/publications/2023/ceo-outlook-navigating-the-road-ahead

Hidden Slide

2024-06 @ UU

Enterprise Architecture

KPMG DE - Global Economic Outlook

https://kpmg.com/de/en/home/insights/2022/04/global-economic-outlook.html

Hidden Slide

2024-06 @ UU

Enterprise Architecture

KPMG CEO Outlook 2023

https://kpmg.com/xx/en/home/insights/2023/09/kpmg-global-ceo-outlook-survey.html

Hidden Slide

2024-06 @ UU

Enterprise Architecture

Finding the future at Burning Man

https://www.rollingstone.com/culture-council/articles/finding-future-at-burning-man-1234863238/

1. Radical Resilience:
2. Pop-Up Mega-Cities
3. Post Capitalism
4. FQ (Focus Quotient)
5. Regenerative Sustainability
6. Inclusive Identities
7. Communal Living
8. End of Death
9. Cultural Tensions
10. Thinking Like a Criminal

Hidden Slide

2024-06 @ UU

Enterprise Architecture

World Economic Forum

shifting from prediction to foresight // Systemic disruption marks the end of trends

​

​

https://www.weforum.org/agenda/2024/05/prediction-foresight-planning-future-disruption/

Hidden Slide

2024-06 @ UU

Enterprise Architecture

BREAK

Enterprise - What do we know

Did you touch upon what is an Enterprise ?

• In the past lectures ?
• In our introduction ?
• In your experience ?

26

2024-06 @ UU

Enterprise Architecture

What is an enterprise

Into social theory reflecting on what you all shared in the introduction.

• Habermas, J. (1986, June). The theory of communicative action reason and the rationalization of society, volume 1. Polity Press.
• Dietz, J. L. G., & Mulder, H. B. F. (2020, April). Enterprise ontology: A human-centric approach to understanding the essence of organisation (1st ed.). Springer �doi: 10.1007/978-3-030-38854-6 https://link.springer.com/book/10.1007/978-3-030-38854-6
• Van Reijswoud, V. E. (1996, June 24). The structure of business communication: Theory, model and application. [Doctoral dissertation, Delft University of Technology]. http://resolver.tudelft.nl/uuid:d8bb57c3-cd09-40a8-ae10-b28a1cae11fe
• Whalen, T. B. (2011, November). Transaction, negotiation, and emergence: A theoretical refinement of general social theory. [Doctoral dissertation, Gonzaga University]. doi: 10.13140/RG.2.2.24601.88160. https://www.researchgate.net/publication/328913070

27

2024-06 @ UU

Enterprise Architecture

What is an enterprise

• Dietz, J. L. G., & Mulder, H. B. F. (2020, April). Enterprise ontology: A human-centric approach to understanding the essence of organisation (1st ed.). Springer
• doi: 10.1007/978-3-030-38854-6 https://link.springer.com/book/10.1007/978-3-030-38854-6 �Dietz, J., & Hoogervorst, J. (2017). Foundations of enterprise engineering. TEE-00 https://www.researchgate.net/publication/320353420_Foundations_of_Enterprise_Engineering
• Van Gils, B. (2023). Data in context: Models as enablers for managing and using data. Springer Nature Switzerland. doi: 10.1007/978-3-031-35539-4 https://link.springer.com/book/10.1007/978-3-031-35539-4

Into language theory reflecting on what you all shared in the introduction.

28

2024-06 @ UU

Enterprise Architecture

Organisational layers and sorts of production

ietz, J. L. G., & Mulder, H. B. F. (2020, April). Enterprise ontology: A human-centric approach to understanding the essence of organisation (1st ed.). Springer �doi: 10.1007/978-3-030-38854-6 https://link.springer.com/book/10.1007/978-3-030-38854-6

29

2024-06 @ UU

Enterprise Architecture

Organisation

• Hoogervorst, J. A. (2017). Foundations of Enterprise Governance and Enterprise Engineering https://www.springer.com/gp/book/9783319721064
• Dietz, J. L., et al, (2013). The discipline of enterprise engineering. https://www.researchgate.net/publication/263068480
• Daft, R., Murphy, J., and Willmott, H. (2010). Organisation Theory and Design. http://www.worldcat.org/oclc/761007858

30

Environment

2024-06 @ UU

Enterprise Architecture

Organisation

• Hoogervorst, J. A. (2017). Foundations of Enterprise Governance and Enterprise Engineering https://www.springer.com/gp/book/9783319721064
• Dietz, J. L., et al, (2013). The discipline of enterprise engineering. https://www.researchgate.net/publication/263068480
• Daft, R., Murphy, J., and Willmott, H. (2010). Organisation Theory and Design. http://www.worldcat.org/oclc/761007858

31

If an organisation is purposeful, �and it is intentionally designed �then the organisation design plays an important role, �else there is no intention and no purpose.

An enterprise is an intentionally created

cooperative of human beings

with a certain societal purpose.

Dietz et al, 2013

… enterprises aims �to fulfil or address certain (perceived) wants and needs �of (certain) societal member of society at large �by delivering products and/or services.

Hoogervorst, 2017

Daft et al, 2010

Environment

2024-06 @ UU

Enterprise Architecture

Why does this matter?

Conway’s Law is Social Act theory by Habermas

IF an enterprise is a cooperation of people, with a certain purpose, �THEN our collaboration determines the data in our systems.��

​

​

​

​

​

​

​

THEN organisation design plays an important

32

2024-06 @ UU

Enterprise Architecture

33

This is not easy!

There be dragons!

34

A story on reality

https://en.wikipedia.org/wiki/The_School_of_Athens

https://en.wikipedia.org/wiki/The_School_of_Athens

35

2024-06 @ UU

Enterprise Architecture

https://en.wikipedia.org/wiki/Allegory_of_the_cave

​

​

36

2024-06 @ UU

Enterprise Architecture

Perspective and information

https://twitter.com/DrNeenaJha/status/1338105837684977664

​

37

2024-06 @ UU

Enterprise Architecture

Perspective and information

https://twitter.com/TanMohammedMD/status/1337865483446587392

38

2024-06 @ UU

Enterprise Architecture

Perspective and information

https://en.wikipedia.org/wiki/Rabbit%E2%80%93duck_illusion�https://scitechconnect.elsevier.com/lessons-from-the-dress-the-fundamental-ambiguity-of-visual-perception�

​

39

2024-06 @ UU

Enterprise Architecture

Reflections and information

https://twitter.com/NicoleBeckwith/status/1277236284470280195/photo/1

40

2024-06 @ UU

Enterprise Architecture

Visualisation and information

https://twitter.com/jimhejl/status/1452814882701824001

https://twitter.com/AkiyoshiKitaoka/status/1568102162064113669

https://www.ritsumei.ac.jp/~akitaoka/index-e.html

​

​

41

2024-06 @ UU

Enterprise Architecture

Visualisation and information

https://x.com/AkiyoshiKitaoka/status/1783764771130785985

https://x.com/AkiyoshiKitaoka/status/1783765416286040153

https://www.ritsumei.ac.jp/~akitaoka/index-e.html

​

​

42

2024-06 @ UU

Enterprise Architecture

Reflections and information

https://writing.exchange/@XanIndigo/109966588561594572

43

2024-06 @ UU

Enterprise Architecture

#938DBB

Screenshot�Colorpick

https://writing.exchange/@XanIndigo/109966588561594572

44

2024-06 @ UU

Enterprise Architecture

45

Rotating Snakes https://www.ritsumei.ac.jp/~akitaoka/index-e.html

46

https://upload.wikimedia.org/wikipedia/commons/a/a3/Magniphy8x51ms.gif

https://en.wikipedia.org/wiki/Phi_phenomenon

https://www.linkedin.com/posts/rafaelgiraldotenorio_entarch-activity-6681201385402376192-4MNK

47

2024-06 @ UU

Enterprise Architecture

48

The map is not the territory

2024-06 @ UU

Enterprise Architecture

49

Observation of �reality is broken

Subjective Chaos

https://twitter.com/AkiyoshiKitaoka/status/1784009348177604803?t=2AzN2jjLP0cRKIVuyHLSaA�https://en.wikipedia.org/wiki/Rabbit%E2%80%93duck_illusion�https://scitechconnect.elsevier.com/lessons-from-the-dress-the-fundamental-ambiguity-of-visual-perception�

50

2024-06 @ UU

Enterprise Architecture

Definition of chaos by Lorenz

‘When the present determines the future, �but the approximate present �does not approximately determine the future.‘

https://en.wikipedia.org/wiki/Edward_Norton_Lorenz

Lorenz, Edward Norton. 1963. “Deterministic Nonperiodic Flow.” Journal of the atmospheric sciences 20(2): 130–41. �doi:10.1175/1520-0469(1963)020<0130:DNF>2.0.CO;2.

​

​

51

Edward Lorenz�May 23, 1917 – April 16, 2008

2024-06 @ UU

Enterprise Architecture

52

Subjective Reality �Leads to�Subjective Chaos

53

So what about objective reality?

54

2024-05 @ PyGrunn

Securing & Chaos

Double Pendulum

Two deterministic systems create one non-deterministic system

Shinbrot, T., Grebogi, C., Wisdom, J., & Yorke, J. A. (1992). Chaos in a double pendulum. American Journal of Physics, 60(6), 491–499. doi: 10.1119/1.16860.�https://en.wikipedia.org/wiki/Double_pendulum

55

2024-06 @ UU

Enterprise Architecture

Butterfly Effect

https://www.linkedin.com/posts/complexity-academy_complexitytheory-activity-6625721108249354241-MsJ�https://en.wikipedia.org/wiki/Edward_Norton_Lorenz�Lorenz, Edward Norton. 1963. “Deterministic Nonperiodic Flow.” Journal of the atmospheric sciences 20(2): 130–41. doi:10.1175/1520-0469(1963)020<0130:DNF>2.0.CO;2.i

56

2024-06 @ UU

Enterprise Architecture

Objective chaos and organisation

Created by Edzo Botjes https://edzob.medium.com/where-does-enterprise-and-solution-architecture-fit-e3a5ae26c750

57

2024-06 @ UU

Enterprise Architecture

Objective chaos in IT

58

2024-06 @ UU

Enterprise Architecture

Objective chaos in IT

https://xkcd.com/2347

59

2024-06 @ UU

Enterprise Architecture

Objective chaos in IT

An example of what is amplifying variety

Continuous innovation.

Huber, D., Kaufmann, H., and Steinmann, M. (2017). Innovation: An Abiding Enigma, pages 11–19. Springer International Publishing, Cham. �https://books.google.nl/books?id=rzckDwAAQBAJ

60

2024-06 @ UU

Enterprise Architecture

What can we learn from objective and subjective chaos�Everything is broken

61

2024-06 @ UU

Enterprise Architecture

"It’s hard to explain to regular people how much technology barely works, how much the infrastructure of our lives is held together by the IT equivalent of baling wire. Computer, and computing, are broken.”

​

- Quinn Norton 2014

​

​

​

https://www.slideshare.net/slideshow/information-security-consciousness/71645722

https://en.wikipedia.org/wiki/Quinn_Norton

Norton Q. (2014. May 20). 'Everything is broken'. The Message. Retrieved from: https://medium.com/message/everything-is-broken-81e5f33a24e1#.sc7pf19g3 (accessed June 18, 2020)

https://berthub.eu/prewar/ncsc%20accss%20surf%20keynote%20bert%20hubert-notes.pdf

https://berthub.eu/articles/posts/cyber-security-pre-war-reality-check/

​

​

62

2024-06 @ UU

Enterprise Architecture

63

Techstack is broken

64

2024-05 @ PyGrunn

Securing & Chaos

65

Software, �Solutions & Enterprises

Continuous Chaos

To summarize

Huber, D., Kaufmann, H., and Steinmann, M. (2017). Innovation: An Abiding Enigma, pages 11–19. Springer International Publishing, Cham. https://books.google.nl/books?id=rzckDwAAQBAJ

Shinbrot, T., Grebogi, C., Wisdom, J., & Yorke, J. A. (1992). Chaos in a double pendulum. American Journal of Physics, 60(6), 491–499. doi: 10.1119/1.16860.

Derbyshire, J., & Wright, G. (2014). Preparing for the future: Development of an ‘antifragile’ methodology that complements scenario planning by omitting causation. Technological Forecasting and Social Change, 82, 215–225. doi: 10.1016/J.TECHFORE.2013.07.001.

​

​

66

2024-06 @ UU

Enterprise Architecture

Objective and Subjective chaos fuel VUCA

Relevant to trends for you, your organisation and the field of Enterprise Architecture

Your reality �inside your organisation, �between organisations, and �around organisations is VUCA.

ISO 31.000 <- DNB

https://doi.org/10.1016/j.bushor.2014.01.001

https://hbr.org/2014/01/what-vuca-really-means-for-you

https://link.springer.com/book/10.1007/978-3-319-16889-0

https://en.wikipedia.org/wiki/Volatility,_uncertainty,_complexity_and_ambiguity

​

​

67

Volatile

Uncertain

Complex

Ambiguous

2024-06 @ UU

Enterprise Architecture

Enterprise > Solution > Software

1. How do we design Enterprises?
2. What is the role of Enterprise Architecture in this?
3. How do we design Solutions and Software?
4. How does it all relate?

2024-06 @ UU

Enterprise Architecture

Function & Construction

IT started in a reductionist approach of the construction (blueprint) … “now we know”

Reductionistic decomposition is a way to get a view on the construction.�In the end, it is the affordance of a system, that determines the value and applications.

​

​

• https://en.wikipedia.org/wiki/Reductionism
• https://en.wikipedia.org/wiki/Duck
• How a table works, 1986, by Charles Ray, at National Georges Pompidou Centre of Art and Culture (Paris), from The Museum of Contemporary Art (LA, USA), gift of the Lannan Foundation, photo by E.A. Botjes 2022-04

69

2024-06 @ UU

Enterprise Architecture

Affordance impacts Enterprise Engineering, Enterprise Design and Enterprise Architecture

https://www.researchgate.net/publication/359821764_Researching_Sensemaking_and_Situational_Architecting_A_First_Step_Towards_a_Guide_for_Sensemaking_Situational_Architecturing_Designing_and_Changing_Enterprises

70

Hidden Slide

2024-06 @ UU

Enterprise Architecture

Enterprise Architecture

• Created by Edzo Botjes https://edzob.medium.com/where-does-enterprise-and-solution-architecture-fit-e3a5ae26c750

71

Business

Information Systems

Infrastructure

2024-06 @ UU

Enterprise Architecture

Enterprise Architecture

​

• Created by Edzo Botjes https://edzob.medium.com/where-does-enterprise-and-solution-architecture-fit-e3a5ae26c750

72

Business

Information

Information Systems

Infrastructure

2024-06 @ UU

Enterprise Architecture

Enterprise Architecture

​

• Created by Edzo Botjes https://edzob.medium.com/where-does-enterprise-and-solution-architecture-fit-e3a5ae26c750

73

Business

Strategy

Information

Information Systems

Infrastructure

2024-06 @ UU

Enterprise Architecture

Enterprise Architecture

​

• Created by Edzo Botjes https://edzob.medium.com/where-does-enterprise-and-solution-architecture-fit-e3a5ae26c750

74

Privacy & Security

Business

Strategy

Information

Information Systems

Infrastructure

Service Management

2024-06 @ UU

Enterprise Architecture

Enterprise Architecture

​

• Created by Edzo Botjes https://edzob.medium.com/where-does-enterprise-and-solution-architecture-fit-e3a5ae26c750

75

Privacy & Security

Business

Strategy

Information

Information Systems

Infrastructure

Service Management

Environment

2024-06 @ UU

Enterprise Architecture

Enterprise Architecture

​

• "ISO/IEC/IEEE Systems and software engineering -- Architecture description," in ISO/IEC/IEEE 42010:2011(E) (Revision of ISO/IEC 42010:2007 and IEEE Std 1471-2000) , vol., no., pp.1-46, 1 Dec. 2011, doi: 10.1109/IEEESTD.2011.6129467. https://dx.doi.org/10.1109/IEEESTD.2011.6129467
• Wagter, R., van Den Berg, M., & Van Steenbergen, M. (2005). Dynamic enterprise architecture: How to make it work. John Wiley & Sons.
• Definition of enterprise architecture (EA)—Gartner information technology glossary. (n.d.). Gartner. Retrieved 31 July 2022, from https://www.gartner.com/en/information-technology/glossary/enterprise-architecture-ea
• Ross, J. W., Weill, P., & Robertson, D. (2014). Enterprise architecture as strategy: Creating a foundation for business execution. Harvard Business Review Press. isbn: 978-14-221-4817-4 https://www.worldcat.org/oclc/1015886391

76

The fundamental concepts or properties of a system in its environment embodied in its elements, relationships, and in the principles of its design and evolution (ISO/IEC/IEEE 42010:2011).

The structure of components, their inter-relationships, and the principles and guidelines governing their design and evolution over time.

TOGAF

The consistent set of principles and models, that guides the design and implementation of processes, organizational structures, information flows and the technical infrastructure within an Enterprise

Wagter, 2005

… including the relationships between elements within the Enterprise and its environment.

(unofficially added by Nouwens e.a., 2020)

Privacy & Security

Business

Strategy

Information

Information Systems

Infrastructure

Service Management

Environment

Enterprise architecture (EA) is a discipline for proactively and holistically leading enterprise responses to disruptive forces by identifying and analysing the execution of change toward desired business vision and outcomes.

​

EA delivers value by presenting business and IT leaders with signature-ready recommendations for adjusting policies and projects to achieve target business outcomes that capitalize on relevant business disruptions.

Gartner

Enterprise Architecture is the organising logic for business processes and IT infrastructure, reflecting its operating models’ integration and standardisation requirements. It provides a long term view of a company’s processes, systems and technologies so that individuals can build capabilities and not just fulfil immediate needs.

TOGAF

2024-06 @ UU

Enterprise Architecture

Objective chaos and organisation�More on this later!

Created by Edzo Botjes https://edzob.medium.com/where-does-enterprise-and-solution-architecture-fit-e3a5ae26c750

77

2024-06 @ UU

Enterprise Architecture

Language, it depends on the conversation scope.

SAFe https://www.scaledagileframework.com/agile-architecture/ https://www.scaledagileframework.com/enterprise-architect/

78

Information Architecture

Privacy & Security

Business

Strategy

Information

Information Systems

Infrastructure

Service Management

Business Architecture

Application Architecture

Technical Architecture

______ Architecture

Common Domains

Business information strategy & planning

Focus on adding value

Application LifeCycle

Scope of responsibility

Enterprise Architect

Solution Architect

System Architect

Across �Value Streams

Across �Systems

Single �Systems

2024-06 @ UU

Enterprise Architecture

Designed for Digital

By MIT

Ross, Jeanne W., et al. Designed for Digital: How to Architect Your Business for Sustained Success. The MIT Press, 2019. DOI.org (Crossref). https://doi.org/10.7551/mitpress/12188.001.0001

Operational Backbone

A coherent set of enterprise systems, data, and processes supporting a company’s core operations

Shared customer insights

Knowledge about what customers are willing to pay for digital offerings and what their demands are towards digital

Digital platform

A repository of business, data, and infrastructure components used to rapidly configure digital offerings

​

Accountability framework

Distribution of responsibilities for digital offerings and components that balances autonomy and alignment

External developer platform

A repository of digital components open to external partners

Skipped�Slide

2024-06 @ UU

Enterprise Architecture

Design for Digital - Content

Ross, J. W., Weill, P., & Robertson, D. (2006). Enterprise architecture as strategy: Creating a foundation for business execution. Harvard Business School Press. �https://www.worldcat.org/title/1015886391. (book)

2020 Digital Transformation - Jeanne Ross by MIT Corporate Relations https://www.youtube.com/watch?v=IrX0UemtWVQ (56m07s).

2019 Designed for Digital - Jeanne Ross by Pegasystems�https://www.youtube.com/watch?v=gaRkQZlSu9Q (30m11s)

Digital Design and Transformation by MIT CISR .. Site with 8 videos on the book of Design for Digital. https://cisr.mit.edu/content/classic-topics-digital-design-and-transformation .

​

​

Hidden Slide

2024-06 @ UU

Enterprise Architecture

Enterprise Security highlighted reference 3/6

5. On Enterprise Architecture
1. Ross, J. W., Beath, C. M., & Mocker, M. (2019). Designed for digital: How to architect your business for sustained success. The MIT Press. https://mitpress.mit.edu/9780262542760/designed-for-digital/
2. van Steenbergen, M., Nouwens, H., Eusterbrock, T., & Botjes, E. A. (2023). Survival of the fitting: An essay on Sensemaking Architecture. Sogeti Nederland B.V. https://doi.org/10.5281/zenodo.10041096
3. Saint-Louis, P., Morency, M. C., & Lapalme, J. (2019). Examination of explicit definitions of enterprise architecture. International Journal of Engineering Business Management, 11, 1–18. https://doi.org/10.1177/1847979019866337
4. Saint-Louis, P., & Lapalme, J. (2018). An exploration of the many ways to approach the discipline of enterprise architecture. International Journal of Engineering Business Management, 10, 184797901880738. https://doi.org/10.1177/1847979018807383
5. Vallerand, J., Lapalme, J., & Moïse, A. (2017). Analysing enterprise architecture maturity models: A learning perspective. Enterprise Information Systems, 11(6), 859–883. https://doi.org/10.1080/17517575.2015.1091951
6. Aven, T. (2021). On Some Foundational Issues Concerning the Relationship Between Risk and Resilience. Risk Analysis, 42(9), 2062–2074. https://doi.org/10.1111/risa.13848
7. Fjaeran, L., & Aven, T. (2021). Creating conditions for critical trust – How an uncertainty-based risk perspective relates to dimensions and types of trust. Safety Science, 133, 105008. https://doi.org/10.1016/j.ssci.2020.105008

81

Hidden Slide

2024-06 @ UU

Enterprise Architecture

Some other references on Enterprise Architecture�In addition to the

“Enterprise Security highlighted reference 3/6”

These papers are nice for a different perspective and great for their references.

1. Hoogervorst, J. A. P., & Dietz, J. L. G. (2008). Enterprise Architecture in Enterprise Engineering. Enterprise Modelling and Information Systems Architectures, Vol 3(1), 3-13 Pages. https://doi.org/10.18417/EMISA.3.1.1
2. Kotusev, S. (2021, July). A Comparison of the Top Four Enterprise Architecture Frameworks. British Computer Society (BCS). https://www.bcs.org/articles-opinion-and-research/a-comparison-of-the-top-four-enterprise-architecture-frameworks/
3. Aldea, A., Vaicekauskaite, E., Daneva, M., & Sebastian Piest, J. P. (2020). Assessing Resilience in Enterprise Architecture: A Systematic Review. 2020 IEEE 24th International Enterprise Distributed Object Computing Conference (EDOC), 1–10. https://doi.org/10.1109/EDOC49727.2020.00011

82

Hidden Slide

2024-06 @ UU

Enterprise Architecture

ISO/IEC/IEEE 42010

​

​

83

Hidden Slide

2024-06 @ UU

Enterprise Architecture

84

The map is not the territory

2024-06 @ UU

Enterprise Architecture

Synchronicity in the now. O’Reilly and Hohpe �On subjective chaos.

• https://www.linkedin.com/posts/barry-o-reilly-b924657_gregor-hohpe-on-the-danger-of-believing-in-activity-7201923883602440192-NEgM
• https://www.linkedin.com/posts/ghohpe_craftconf-activity-7201891088645672960-NBc7

85

Hidden Slide

2024-06 @ UU

Enterprise Architecture

Watch tips

An Introduction to Residuality Theory �- Barry O'Reilly - NDC London 2024�https://www.youtube.com/watch?v=_MPUoiG6w_U

Dealing with unanticipated needs

– Dave Snowden

https://www.youtube.com/watch?v=xYqWREPb3Lc

86

2024-06 @ UU

Enterprise Architecture

Work by Barry O’Reilly

1. An Introduction to Residuality Theory (2020):�https://www.sciencedirect.com/science/article/pii/S1877050920305585
2. The Philosophy of Residuality Theory (2021):�https://www.sciencedirect.com/science/article/pii/S1877050921007420
3. The Machine In the Ghost: Autonomy, Hyperconnectivity and Residual Causality (2021)�https://www.mdpi.com/2409-9287/6/4/81
4. Residuality Theory, random simulation and attractor networks (2022)�https://www.sciencedirect.com/science/article/pii/S1877050922004975
5. Residuality and Representation: Toward a Coherent Philosophy of Software Architecture (2023)�https://www.sciencedirect.com/science/article/pii/S1877050923010621
6. Book - Residues: Time, Change, and Uncertainty in Software Architecture.�https://leanpub.com/residuality
7. An Introduction to Residuality Theory - Barry O'Reilly - NDC Oslo 2023 (52m54s)�https://www.youtube.com/watch?v=0wcUG2EV-7E

87

Hidden Slide

2024-06 @ UU

Enterprise Architecture

88

Is�Enterprise Architecture

broken?

89

Is�reality

broken?

Videos on Reality

• Everything is Miscellaneous | David Weinberger | Talks at Google (57m01s)�https://www.youtube.com/watch?v=43DZEy_J694 �
• My stroke of insight | Jill Bolte Taylor | TED (20m11s)�https://www.youtube.com/watch?v=UyyjU8fzEYU �
• Modelling vs Reality - Einar Høst - NDC Oslo 2023 (54m18s)�https://www.youtube.com/watch?v=SAWVPCO575k �
• An Introduction to Residuality Theory - Barry O'Reilly - NDC Oslo 2023 (52m54s)�https://www.youtube.com/watch?v=0wcUG2EV-7E

90

Hidden Slide

2024-06 @ UU

Enterprise Architecture

More Videos on Reality�“Proceed with caution, questioning the fabric of reality can lead you to madness or the truth, �and the problem is, you won’t know which is which” - Lex Friedman

• Do we see reality as it is? | Donald Hoffman | TED (21m50s)�https://www.youtube.com/watch?v=oYp5XuGYqqY
• Donald Hoffman: Reality is an Illusion - How Evolution Hid the Truth | Lex Fridman Podcast #293 (3h16m08s)�https://www.youtube.com/watch?v=reYdQYZ9Rj4
• Ten Lectures on Cognitive Linguistics - George Lakoff, Ph.D. (2004)�Lecture 03- Cognitive semantics The basic mechanism of thought 2 (1h41m23s)�https://www.youtube.com/watch?v=m76gR4dsczg
• Mental models are powerful | Real World Examples (1m15s)�https://www.youtube.com/watch?v=0ko50kAXIFk
• A Revolution in Thought? - Dr Iain McGilchrist (1h04m11s)�https://www.youtube.com/watch?v=AuQ4Hi7YdgU
• If Life Is Random, Is It Meaningless? (with Brian Klaas) 1/22/24 (59m56s)�https://www.youtube.com/watch?v=-JN0Alk4cVA
• Professor Dave Snowden - Change and Complexity in Learning Conference (1h10m15s)�https://www.youtube.com/watch?v=KUOOHDMA2JI
• Managing in Complexity (and chaos) - Dave Snowden (48m44s)�https://www.youtube.com/watch?v=_h7jhjAWXJ0

91

Hidden Slide

2024-06 @ UU

Enterprise Architecture

92

Security

Definition of Secure & inSecure

• Schneier, B. (2008). The psychology of security. International conference on cryptology in Africa, 5023, 50–79. Doi: 10.1007/978-3-540-68164-9_5.
• Huang, D.-L., Rau, P.-L. P., & Salvendy, G. (2010). Perception of information security. Behaviour & Information Technology, 29(3), 221–232. doi: 10.1080/01449290701679361.

93

Secure

in-Secure

Feeling

Reality

Secure

in-Secure

Expectation

Observation

Wisdom that will save you �time, money and frustration.

"If you think technology can solve �your security problems, �then you don't understand the problems �and you don't understand the technology.”��- Bruce Schneier, secrets and lies, 2007

​

https://www.schneier.com/books/secrets-and-lies-pref

94

2024-06 @ UU

Enterprise Architecture

95

This definition of security,

is not about security.�It is about uncertainty,

and sensemaking

2024-06 @ UU

Enterprise Architecture

96

Resilience &�Enterprise Design

2024-06 @ UU

Enterprise Architecture

Generic definition of Resilience

• Botjes, E. A., van den Berg, M., van Gils, B., & Mulder, H. (2021). Attributes relevant to antifragile organizations. In J. P. A. Almeida, D. Bork, G. Guizzardi, M. Montali, H. A. Proper & T. P. Sales (Eds.), 2021 IEEE 23nd conference on business informatics (CBI) (pp. 62–71, Vol. 01). IEEE. doi: 10.1109/CBI52690.2021.00017

97

2024-06 @ UU

Enterprise Architecture

Subtypes of Resilience

• Botjes, E. A., van den Berg, M., van Gils, B., & Mulder, H. (2021). Attributes relevant to antifragile organizations. In J. P. A. Almeida, D. Bork, G. Guizzardi, M. Montali, H. A. Proper & T. P. Sales (Eds.), 2021 IEEE 23nd conference on business informatics (CBI) (pp. 62–71, Vol. 01). IEEE. doi: 10.1109/CBI52690.2021.00017
• Martin-Breen, P. and Anderies, J. M. (2011). The bellagio initiative, background paper, resilience: A literature review. In Resilience: A Literature Review, Brighton:IDS. http://opendocs.ids.ac.uk/opendocs/handle/123456789/3692.
• Taleb, N. N. (2012). Antifragile: Things that gain from disorder (Vol. 3). Random House Trade Paperbacks.

98

2024-06 @ UU

Enterprise Architecture

Subtypes of Resilience

• Botjes, E. A., van den Berg, M., van Gils, B., & Mulder, H. (2021). Attributes relevant to antifragile organizations. In J. P. A. Almeida, D. Bork, G. Guizzardi, M. Montali, H. A. Proper & T. P. Sales (Eds.), 2021 IEEE 23nd conference on business informatics (CBI) (pp. 62–71, Vol. 01). IEEE. doi: 10.1109/CBI52690.2021.00017
• Martin-Breen, P. and Anderies, J. M. (2011). The bellagio initiative, background paper, resilience: A literature review. In Resilience: A Literature Review, Brighton:IDS. http://opendocs.ids.ac.uk/opendocs/handle/123456789/3692.
• Taleb, N. N. (2012). Antifragile: Things that gain from disorder (Vol. 3). Random House Trade Paperbacks.

99

Impertinent

Recover

Adapt

Skipped�Slide

2024-06 @ UU

Enterprise Architecture

Subtypes of Resilience

• Botjes, E. A., van den Berg, M., van Gils, B., & Mulder, H. (2021). Attributes relevant to antifragile organizations. In J. P. A. Almeida, D. Bork, G. Guizzardi, M. Montali, H. A. Proper & T. P. Sales (Eds.), 2021 IEEE 23nd conference on business informatics (CBI) (pp. 62–71, Vol. 01). IEEE. doi: 10.1109/CBI52690.2021.00017
• Martin-Breen, P. and Anderies, J. M. (2011). The bellagio initiative, background paper, resilience: A literature review. In Resilience: A Literature Review, Brighton:IDS. http://opendocs.ids.ac.uk/opendocs/handle/123456789/3692.
• Taleb, N. N. (2012). Antifragile: Things that gain from disorder (Vol. 3). Random House Trade Paperbacks.

100

construction stays the same�functionality stays the same

construction changes�functionality stays the same

construction changes�functionality changes

2024-06 @ UU

Enterprise Architecture

The business dilemma

‘Normal’ resilience is not enough, and it is the default language.

• Botjes, E. A., van den Berg, M., van Gils, B., & Mulder, H. (2021). Attributes relevant to antifragile organizations. In J. P. A. Almeida, D. Bork, G. Guizzardi, M. Montali, H. A. Proper & T. P. Sales (Eds.), 2021 IEEE 23nd conference on business informatics (CBI) (pp. 62–71, Vol. 01). IEEE. doi: 10.1109/CBI52690.2021.00017
• Martin-Breen, P. and Anderies, J. M. (2011). The bellagio initiative, background paper, resilience: A literature review. In Resilience: A Literature Review, Brighton:IDS. http://opendocs.ids.ac.uk/opendocs/handle/123456789/3692.
• Taleb, N. N. (2012). Antifragile: Things that gain from disorder (Vol. 3). Random House Trade Paperbacks.

101

2024-06 @ UU

Enterprise Architecture

102

Antifragility, �maximizing �Resilience

2024-06 @ UU

Enterprise Architecture

Triad of fragility

• Taleb, N. N. (2012). Antifragile: Things that gain from disorder (Vol. 3). Random House Trade Paperbacks.
• Botjes, E. A., van den Berg, M., van Gils, B., & Mulder, H. (2021). Attributes relevant to antifragile organizations.

In J. P. A. Almeida, D. Bork, G. Guizzardi, M. Montali, H. A. Proper & T. P. Sales (Eds.), 2021 IEEE 23nd

conference on business informatics (CBI) (pp. 62–71, Vol. 01). IEEE. doi: 10.1109/CBI52690.2021.00017

103

2024-06 @ UU

Enterprise Architecture

Antifragile as anti-these of fragile

Embrace the pain to gain

• Taleb, N. N. (2012). Antifragile: Things that gain from disorder (Vol. 3). Random House Trade Paperbacks.
• Botjes, E. A., van den Berg, M., van Gils, B., & Mulder, H. (2021). Attributes relevant to antifragile organizations.

In J. P. A. Almeida, D. Bork, G. Guizzardi, M. Montali, H. A. Proper & T. P. Sales (Eds.), 2021 IEEE 23nd

conference on business informatics (CBI) (pp. 62–71, Vol. 01). IEEE. doi: 10.1109/CBI52690.2021.00017

104

2024-06 @ UU

Enterprise Architecture

105

Antifragility &�Enterprise Design

2024-06 @ UU

Enterprise Architecture

Language, it depends on the conversation scope.

How does this change the discipline of Enterprise Architecture?

SAFe https://www.scaledagileframework.com/agile-architecture/ https://www.scaledagileframework.com/enterprise-architect/

106

Information Architecture

Privacy & Security

Business

Strategy

Information

Information Systems

Infrastructure

Service Management

Business Architecture

Application Architecture

Technical Architecture

______ Architecture

Common Domains

Business information strategy & planning

Focus on adding value

Application LifeCycle

Scope of responsibility

Enterprise Architect

Solution Architect

System Architect

Across �Value Streams

Across �Systems

Single �Systems

2024-06 @ UU

Enterprise Architecture

Future Enterprise Architecture �

​

1. Continuous maximize the overlap between expectation and observation.
2. Maximize the resilient o-organisation, the rest will follow.
3. Minimize technical / organisational design/ implementation debt.
4. …
5. …
6. …

107

2024-06 @ UU

Enterprise Architecture

Future Enterprise Architecture �

​

• Continuous maximize the overlap between expectation and observation.
• Maximize the resilient o-organisation, the rest will follow.
• Minimize technical / organisational design/ implementation debt.
• Enterprise Architecture will be about decoupling and resilience
• Enterprise Architecture will become Enterprise Design
• Enterprise Design will become an Art, since humans are strange

108

2024-06 @ UU

Enterprise Architecture

A small contribution to�The future of E.A.

van Steenbergen, M., Nouwens, H., Eusterbrock, T., & Botjes, E. A. (2023). Survival of the fitting: An essay on Sensemaking Architecture. Sogeti Nederland B.V. https://doi.org/10.5281/zenodo.10041096

1. Human-centred �Respecting the power of the o-organisation.
2. Flow-oriented�Respecting resilience
3. Value-sensitive�Respecting subjective reality and purpose
4. Situational�Respecting continuous chaos

Skipped�Slide

2024-06 @ UU

Enterprise Architecture

Causal loop diagram to envision sensemaking architecture

110

Skipped�Slide

2024-06 @ UU

Enterprise Architecture

See - Accept - Act

Botjes, Edzo. (2020). Defining Antifragility and the application on Organisation Design (1.0) [Zenodo].

https://doi.org/10.5281/zenodo.3719389

​

​

111

Do not focus on hard controls and requirements, �focus on behaviour.

Decouple!

Assume breach, �Assume failure and Exploit it !�Learn from it !!

Human centered!

Chaos is inevitable

Embrace chaos

Stay away from Fragile

become

Focus on the humans

2024-06 @ UU

Enterprise Architecture

112

TRENDS?�NO!

Skipped�Slide

Back to the trends

Some things we can predict, most things not. This is what the World Economic Forum is stating

https://www.weforum.org/agenda/2024/05/prediction-foresight-planning-future-disruption/

113

BONUS

Skipped�Slide

2024-06 @ UU

Enterprise Architecture

114

Sensemaking

Skipped�Slide

Cynefin framework by Dave Snowden

https://thecynefin.co/library/cynefin-weaving-sense-making-into-the-fabric-of-our-world/

https://www.systemswisdom.com/sites/default/files/Snowdon-and-Boone-A-Leader's-Framework-for-Decision-Making_0.pdf

https://en.wikipedia.org/wiki/Cynefin_frameworkhttps://doi.org/10.1108/08944310510556955 https://www.researchgate.net/publication/330500755 https://ieeexplore.ieee.org/abstract/document/5386804

​

​

Holistic

approach

Reductionistic

approach

Correlation: seen�Causality: known

Correlation: seen�Causality: unknown

Correlation: unseen�Causality: unknown

Correlation: seen�Causality: known

Skipped�Slide

2024-06 @ UU

Enterprise Architecture

116

Northern Star

Skipped�Slide

Learning / Perception / Multiverse

Plato

Senge, P. M. (1990). The Fifth Discipline: The Art and Practice of the Learning organisation. A Currency book. Doubleday/Currency, New York, NY, USA.

Hestenes, D. (2010). Modeling theory for math and science education. In Modeling students’ mathematical modeling competencies, pages 13–41. Springer.

https://en.wikipedia.org/wiki/Allegory_of_the_cave

https://plato.stanford.edu/entries/plato-myths

​

​

117

BONUS

Skipped�Slide

2024-06 @ UU

Enterprise Architecture

Learning / Perception / Multiverse

Plato / Senge/ Hestenes

Senge, P. M. (1990). The Fifth Discipline: The Art and Practice of the Learning organisation. A Currency book. Doubleday/Currency, New York, NY, USA.

Hestenes, D. (2010). Modeling theory for math and science education. In Modeling students’ mathematical modeling competencies, pages 13–41. Springer.

https://en.wikipedia.org/wiki/Allegory_of_the_cave

https://plato.stanford.edu/entries/plato-myths

​

​

118

Mental Model

Behavior

Reality

II

BONUS

Skipped�Slide

2024-06 @ UU

Enterprise Architecture

Learning / Perception / Multiverse

Mental Models are in your head!

Senge, P. M. (1990). The Fifth Discipline: The Art and Practice of the Learning organisation. A Currency book. Doubleday/Currency, New York, NY, USA.

Hestenes, D. (2010). Modeling theory for math and science education. In Modeling students’ mathematical modeling competencies, pages 13–41. Springer.

https://en.wikipedia.org/wiki/Allegory_of_the_cave

https://plato.stanford.edu/entries/plato-myths

​

​

119

Mental Model

Behavior

Reality

II

What you do not know,

you can not see [social engineering].

​

What you do not expect,

you can not see [inattentional blindness].

BONUS

2024-06 @ UU

Enterprise Architecture

Learning / Perception / Multiverse

AI / Personal Search Bubble/ Personal timeline in TikTok/ Insta etc

Senge, P. M. (1990). The Fifth Discipline: The Art and Practice of the Learning organisation. A Currency book. Doubleday/Currency, New York, NY, USA.

Hestenes, D. (2010). Modeling theory for math and science education. In Modeling students’ mathematical modeling competencies, pages 13–41. Springer.

https://en.wikipedia.org/wiki/Allegory_of_the_cave

https://plato.stanford.edu/entries/plato-myths

​

​

120

Mental Model

Behavior

Reality

II

BONUS

2024-06 @ UU

Enterprise Architecture

Learning / Perception / Multiverse

5th Discipline .. Key for collaboration

Senge, P. M. (1990). The Fifth Discipline: The Art and Practice of the Learning organisation. A Currency book. Doubleday/Currency, New York, NY, USA.

Hestenes, D. (2010). Modeling theory for math and science education. In Modeling students’ mathematical modeling competencies, pages 13–41. Springer.

https://en.wikipedia.org/wiki/Allegory_of_the_cave

https://plato.stanford.edu/entries/plato-myths

​

​

121

Mental Model

Building shared vision

Personal�Mastery

Team�Learning

Systems�Thinking

Behavior

Reality

I

III

II

IV

V

BONUS

Skipped�Slide

2024-06 @ UU

Enterprise Architecture

122

APPENDIX

Hidden Slide

Enterprise Security highlighted reference 1/8

Sections:

1. On Complexity Science/ Reality
2. On Security
3. On Cyber Security & Cyber Resilience
4. On Enterprise & Enterprise Engineering
5. On Enterprise Architecture
6. On Technical Enterprise Architecture & Software Architecture
7. On Enterprise Security Architecture
8. On Zero-Trust�

On Complexity Science/ Reality

• Heylighen, F., Cilliers, P., & Gershenson, C. (2016). Complexity and Philosophy. Critical Complexity, abs/cs/0604072, 211–222. https://doi.org/10.1515/9781501502590-018
• Strikwerda, J. (2023). Organized Complexity in Business: Understanding, Concepts and Tools. In Future of Business and Finance. Springer International Publishing. https://doi.org/10.1007/978-3-031-25237-2
• Jackson, M. C. (2019). Critical Systems Thinking and the Management of Complexity: Responsible leadership for a complex world (1st ed.). Wiley. https://search.worldcat.org/en/title/1084618665
• McGilchrist, I. (2021). The Matter With Things: Our Brains, Our Delusions, and the Unmaking of the World. (1–2). Perspectiva Press. https://search.worldcat.org/title/1287050088

123

Hidden Slide

2024-06 @ UU

Enterprise Architecture

Enterprise Security highlighted reference 2/8

On Security

• Cains, Mariana G., Liberty Flora, Danica Taber, Zoe King, and Diane S. Henshel. 2022. “Defining Cyber Security and Cyber Security Risk within a Multidisciplinary Context Using Expert Elicitation.” Risk Analysis 42(8): 1643–69. doi:10.1111/risa.13687. https://onlinelibrary.wiley.com/doi/full/10.1111/risa.13687
• Lezzi, Marianna, Mariangela Lazoi, and Angelo Corallo. 2018. “Cybersecurity for Industry 4.0 in the Current Literature: A Reference Framework.” Computers in Industry 103: 97–110. doi:10.1016/j.compind.2018.09.004. https://www.sciencedirect.com/science/article/abs/pii/S0166361518303658
• Schatz, Daniel, Rabih Bashroush, and Julie Wall. 2017. “Towards a More Representative Definition of Cyber Security.” The Journal of Digital Forensics, Security and Law. doi:10.15394/jdfsl.2017.1476. https://commons.erau.edu/jdfsl/vol12/iss2/8/
• Bay, Morten. 2016. “What Is Cybersecurity? In Search of an Encompassing Definition for the Post-Snowden Era.” French Journal For Media Research 6: 1--28. https://frenchjournalformediaresearch.com/lodel-1.0/main/docannexe/file/988/morten_pdf.pdf
• Smith, S. (2023). Towards a Scientific Definition of Cyber Resilience. International Conference on Cyber Warfare and Security, 18(1), 379–386. https://doi.org/10.34190/iccws.18.1.960
• Schneier, B. (2008). The Psychology of Security. In S. Vaudenay (Ed.), Progress in Cryptology – AFRICACRYPT 2008 (Vol. 5023, pp. 50–79). Springer Berlin Heidelberg. https://doi.org/10.1007/978-3-540-68164-9_5
• Huang, D.-L., Rau, P.-L. P., & Salvendy, G. (2010). Perception of information security. Behaviour & Information Technology, 29(3), 221–232. https://doi.org/10.1080/01449290701679361

124

Hidden Slide

2024-06 @ UU

Enterprise Architecture

Enterprise Security highlighted reference 3/8

On Cyber Security & Cyber Resilience

• Eling, M., McShane, M., & Nguyen, T. (2021). Cyber risk management: History and future research directions. Risk Management and Insurance Review, 24(1), 93–125. https://doi.org/10.1111/rmir.12169
• Alhidaifi, S. M., Asghar, M. R., & Ansari, I. S. (2024). A Survey on Cyber Resilience: Key Strategies, Research Challenges, and Future Directions. ACM Computing Surveys, 56(8), 1–48. https://doi.org/10.1145/3649218
• Sepúlveda Estay, D. A., Sahay, R., Barfod, M. B., & Jensen, C. D. (2020). A systematic review of cyber-resilience assessment frameworks. Computers & Security, 97, 101996. https://doi.org/10.1016/j.cose.2020.101996
• Botjes, E. A., van den Berg, M., van Gils, B., & Mulder, H. (2021). Attributes relevant to antifragile organizations. In J. P. A. Almeida, D. Bork, G. Guizzardi, M. Montali, H. A. Proper, & T. P. Sales (Eds.), 2021 IEEE 23nd Conference on Business Informatics (CBI) (Vol. 01, pp. 62–71). IEEE. https://doi.org/10.1109/CBI52690.2021.00017

125

Hidden Slide

2024-06 @ UU

Enterprise Architecture

Enterprise Security highlighted reference 4/8

On Enterprise & Enterprise Engineering

• Hoogervorst, J. A. P. (2018). Foundations of enterprise governance and enterprise engineering: Presenting the employee-centric theory of organization (1st ed.). Springer International Publishing AG. https://doi.org/10.1007/978-3-319-72107-1
• Dietz, J. L. G., & Mulder, H. B. F. (2020). Enterprise Ontology: A Human-Centric Approach to Understanding the Essence of Organisation (1st ed.). Springer International Publishing. https://doi.org/10.1007/978-3-030-38854-6

126

Hidden Slide

2024-06 @ UU

Enterprise Architecture

Enterprise Security highlighted reference 5/8

On Enterprise Architecture

• Ross, J. W., Beath, C. M., & Mocker, M. (2019). Designed for digital: How to architect your business for sustained success. The MIT Press. https://mitpress.mit.edu/9780262542760/designed-for-digital
• van Steenbergen, M., Nouwens, H., Eusterbrock, T., & Botjes, E. A. (2023). Survival of the fitting: An essay on Sensemaking Architecture. Sogeti Nederland B.V. https://doi.org/10.5281/zenodo.10041096
• Saint-Louis, P., Morency, M. C., & Lapalme, J. (2019). Examination of explicit definitions of enterprise architecture. International Journal of Engineering Business Management, 11, 1–18. https://doi.org/10.1177/1847979019866337
• Saint-Louis, P., & Lapalme, J. (2018). An exploration of the many ways to approach the discipline of enterprise architecture. International Journal of Engineering Business Management, 10, 184797901880738. https://doi.org/10.1177/1847979018807383
• Vallerand, J., Lapalme, J., & Moïse, A. (2017). Analysing enterprise architecture maturity models: A learning perspective. Enterprise Information Systems, 11(6), 859–883. https://doi.org/10.1080/17517575.2015.1091951
• Aven, T. (2021). On Some Foundational Issues Concerning the Relationship Between Risk and Resilience. Risk Analysis, 42(9), 2062–2074. https://doi.org/10.1111/risa.13848
• Fjaeran, L., & Aven, T. (2021). Creating conditions for critical trust – How an uncertainty-based risk perspective relates to dimensions and types of trust. Safety Science, 133, 105008. https://doi.org/10.1016/j.ssci.2020.105008

127

Hidden Slide

2024-06 @ UU

Enterprise Architecture

Enterprise Security highlighted reference 6/8

On Technical Enterprise Architecture & Software Architecture

• Hohpe
1. Hohpe, G., & Woolf, B. A. (2004). Enterprise Integration Patterns: Designing, Building, and Deploying Messaging Solutions. Addison-Wesley. https://search.worldcat.org/en/title/52901145
2. Hohpe, G. (2024). Platform Strategy: Innovation Through Harmonization. Leanpub.
3. Hohpe, G. (2020). The software architect elevator: Redefining the architect’s role in the digital enterprise (First edition). O’Reilly Media.
4. Hohpe, G. (2020). Cloud Strategy: A Decision-Based Approach to Successful Cloud Migration. Independently Published. http://leanpub.com/cloudstrategy
• O’Reilly
• O’Reilly, B. M. (2023). Residuality and Representation: Toward a Coherent Philosophy of Software Architecture. Procedia Computer Science, 224, 91–97. https://doi.org/10.1016/j.procs.2023.09.015
• O’Reilly, B. M. (2022). Residuality Theory, random simulation, and attractor networks. Procedia Computer Science, 201, 639–645. https://doi.org/10.1016/j.procs.2022.03.084
• O’Reilly, B. M. (2021). The Machine in the Ghost: Autonomy, Hyperconnectivity, and Residual Causality. Philosophies, 6(4), 81. https://doi.org/10.3390/philosophies6040081

128

Hidden Slide

2024-06 @ UU

Enterprise Architecture

Enterprise Security highlighted reference 7/8

On Enterprise Security Architecture

• Diefenbach, T., Lucke, C., & Lechner, U. (2019). Towards an Integration of Information Security Management, Risk Management and Enterprise Architecture Management – A Literature Review. 2019 IEEE International Conference on Cloud Computing Technology and Science (CloudCom), 326–333. https://doi.org/10.1109/CloudCom.2019.00057
• McClintock, M., Falkner, K., Szabo, C., & Yarom, Y. (2020). Enterprise Security Architecture: Mythology or Methodology?: Proceedings of the 22nd International Conference on Enterprise Information Systems, 2, 679–689. https://doi.org/10.5220/0009404406790689
• Graham, M. R. (2021). Enterprise security architecture-mythology or methodology? [PhD Thesis, The University of Adelaide]. https://digital.library.adelaide.edu.au/dspace/bitstream/2440/132936/1/Graham2021_PhD.pdf
• Kuiper, Renato 2022 “Security architecture development over 20 years” https://isaca.nl/nieuws/security-architecture-development-over-20-years
• TOGAF https://publications.opengroup.org/g152
• O-ESA https://publications.opengroup.org/g112
• SABSA
• https://sabsacourses.com/wp-content/uploads/2021/02/TSI-T100-Modelling-SABSA-with-ArchiMate.pdf �https://sabsa.org/other-resources/
• Burkett, Jason S. 2012. “Business Security Architecture: Weaving Information Security into Your Organization’s Enterprise Architecture through SABSA®.” Information Security Journal: A Global Perspective 21(1): 47–54. doi:10.1080/19393555.2011.629341.
• OSA https://www.opensecurityarchitecture.org/cms/foundations/osa-landscape

129

Hidden Slide

2024-06 @ UU

Enterprise Architecture

Enterprise Security highlighted reference 8/8

On Zero-Trust

• Ross, Ron, Victoria Pillitteri, Richard Graubart, Deborah Bodeau, and Rosalie McQuaid. 2021. Developing Cyber-Resilient Systems: A Systems Security Engineering Approach. Gaithersburg, MD: National Institute of Standards and Technology (U.S.). doi:10.6028/NIST.SP.800-160v2r1. https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-160v2r1.pdf
• Rose, Scott, Oliver Borchert, Stu Mitchell, and Sean Connelly. 2020. Zero Trust Architecture. National Institute of Standards and Technology. doi:10.6028/NIST.SP.800-207. https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-207.pdf
• Bobbert, Yuri, Jeroen Scheerder, and Tim Timmermans. 2022. “Perspectives from 50+ Years’ Practical Zero Trust Experience and Learnings on Buyer Expectations and Industry Promises.” In Intelligent Computing, Lecture Notes in Networks and Systems, ed. Kohei Arai. Cham, Switzerland: Springer International Publishing, 864–81. doi:10.1007/978-3-031-10467-1_53.
• Bobbert, Yuri, and Jeroen Scheerder. 2022. “Zero Trust Validation: From Practice to Theory : An Empirical Research Project to Improve Zero Trust Implementations.” In 2022 IEEE 29th Annual Software Technology Conference (STC), Gaithersburg, MD, USA: IEEE, 93–104. doi:10.1109/STC55697.2022.00021. https://www.researchgate.net/publication/365597807
• Bobbert, Yuri, and Tim Timmermans. 2024. “Zero Trust and Compliance with Industry Frameworks and Regulations.” : 1--18. doi:10.1007/978-3-031-54053-0_43.
• Migeon, Jean-Hugues, and Yuri Bobbert. 2022. “Leveraging Zero Trust Security Strategy to Facilitate Compliance to Data Protection Regulations.” In Intelligent Computing, Lecture Notes in Networks and Systems, ed. Kohei Arai. Cham: Springer International Publishing, 847–63. doi:10.1007/978-3-031-10467-1_52. https://www.researchgate.net/publication/361820473

130

Hidden Slide

2024-06 @ UU

Enterprise Architecture