Introduction to New Generation IT Infrastructures

One of the most fundamental aspects of information security is ensuring the security of IT infrastructures. To meet this requirement, organizations establish IT infrastructure teams and implement security measures for IT components. In addition, the level of security is further enhanced through various measures such as security controls, penetration testing and vulnerability assessments.

However, it is important to analyze the appropriateness of the scope accepted for 'IT infrastructure'. Common practices in organizations show that the focus within the IT infrastructure typically includes the following:

• Servers

• Databases

• Computers

• Printers and Mobile Devices

• Network Infrastructure ve Network Devices

• Web and Desktop Applications

• Mobile Applications

In addition, there are developments in IT systems that have led to the emergence of new technologies and components to be considered as follows:

• Cloud Computing

• Virtualization System

• Internet of Things

• Cyber Physical Systems

The IT industry has not developed a specific term to refer to these technologies as a whole. However, for the purposes of this module, we will refer to them as "New Generation IT Infrastructures".

New generation IT infrastructures are acknowledged and accepted as integral components of IT systems by experts and organizations alike. However, in practice, these components are often overlooked, particularly when it comes to security management. This oversight can result in significant security vulnerabilities for organizations utilizing these systems. Even those that have not yet experienced such vulnerabilities face considerable potential risks.

This module will address each of the IT technologies listed above in separate sections. We will first provide information about each technology and then outline the necessary security approaches for each. The next section will focus on Cloud Computing," the first example of New Generation IT Infrastructure.