Security Modeling

Modeling is perhaps one of the most critical aspects of documentation especially in the security field.  Modeling can take multiple forms and can be simple or incredibly complex however the overall purpose is always the same.  In my mind the purpose of modeling is to tell a story via pictures.  This allows individuals viewing the model to gain an in depth level of understanding in relatively short amount of time.

Modeling is important because it allows the viewers to see how things are organized.  Network diagrams show how the environment is laid out.  Use case diagrams explain the logic of operations such as security rule and script logic.  These diagrams serve multiple purposes including helping the implementer lay things out before they proceed with an implementation as well as helping train new individuals on the team.

I realize that no one truly likes creating documentation however it's incredibly important especially in the IT world.  Without documentation especially modeling diagrams it is incredibly difficult to mange the systems down the road, train new workers on the systems in place, and gain an in depth understanding of the current implementation.