Security is one of the most essential attributes of solution design. Many organizations fail due to security breaches, which results in a loss in customer trust and an unrecoverable business loss. Industry-standard regulations such as PCI for finance, HIPPA for health care, GDPR for the European Union, and SOC compliance enforce security to protect consumer data and provide standard guidance to the organization. Depending on your industry and region, you must comply with local legislation by adhering to compliance needs. Primarily, application security needs to be applied in the following aspects of solution design:
- Authentication and authorization
- Web security
- Network security
- Infrastructure security
- Data security
These can be seen in the following diagram:
Let's take a look at the different security aspects. You will dive deep into each component in Chapter 8, Security Considerations.