
How to explain platforms, frameworks, and infrastructures to stakeholders
Technology is full of language that is unfamiliar or misunderstood. All fields have their own terminology, but tech is interesting in that the success of a project often depends on input from stakeholders who are immersed in non-tech fields. Each stakeholder has a unique set of experience, knowledge, and perspectives that will inform their expectations and definitions of success. Technology terms and other industry-specific language should be avoided or defined early in the project. Clear communication is critical to getting the stakeholder buy-in you need.
Establishing a shared understanding of a project may be an ongoing effort throughout the life of the project. To help you with this effort, you can map the project to its platform, framework, and infrastructure.
Why platforms, frameworks, and infrastructures?
Technology projects always impact a platform, framework, infrastructure, or some combination of the three. The project leads probably understand these concepts intuitively. For example, you already know that you cannot deploy a solution to an unsupported infrastructure. You know that your project solution must follow best practices and remain in compliance.
The stakeholders and decision-makers may need you to explain certain decisions, especially if there is a process change that appears to make things more difficult. Why do they need to install an authentication app? Why can’t they connect their personal smartphone to the business network? Mapping your project to platforms, frameworks, and infrastructures can help you answer questions and manage expectations.
Breaking it down
Let’s start with an explanation of the terms. A platform is the foundation of a solution. There are many types of platforms.
Platform Type |
Platform |
Operating systems |
Windows, Android, Linux, iOS |
Cloud platforms |
Microsoft Azure, Amazon Web Services (AWS) |
Enterprise Resource Planning (ERP) |
SAP, Oracle ERP Cloud |
Customer Relationship Management (CRM) |
Salesforce, Microsoft Dynamics CRM |
Content Management Systems (CMS) |
WordPress, Drupal |
AI and Machine Learning Platforms |
IBM Watson, Amazon Machine Learning |
Platforms normally include tools and services used to customize and manage the deployment.
Frameworks provide us with guidelines and best practices. These frameworks are models that standardize the construction and management of computer networks and other technologies.
Framework |
Purpose |
A security model based on the principle of "never trust, always verify." This framework treats every connection and endpoint as a potential threat. |
|
A cloud-based security architecture defined by Gartner. This model recognizes the evolution of business networks as companies move to SaaS applications and other cloud deployments. |
|
Provides guidelines to manage and reduce cybersecurity risk. |
There are application development frameworks like Django and Angular, which are outside of the scope of this post. Regulations like General Data Protection Regulation (GDPR) and Health Insurance Portability and Accountability Act (HIPAA) are also considered frameworks because they establish a set of rules and guidelines to protect sensitive information. The OWASP Top 10 is defined by the authors as an awareness document, but many security teams use it as a framework to guide their security strategies.
The infrastructure is the underlying technology and resources needed to run your project or application when it goes into production. It includes the facilities, systems, and other physical and virtual components that support the operation.
Platform |
Infrastructure |
Microsoft Windows |
Windows kernel, system device drivers, system libraries, and user interface. |
Public cloud datacenter |
Servers, network components, power and cooling systems, security and management applications, racks and cabinets, fire suppression systems, etc. |
Internet Connectivity |
Wired and wireless connectivity components (cables, wi-fi bridges), routers other electronics, Internet Service Providers (ISPs) with available access points, TCP/IP or other protocol suite. |
The infrastructure and platform must work together properly, and both must meet the standards of the relevant frameworks. Mapping your project requirements to these concepts can help you answer questions, justify purchase requests, and find potential trouble spots that you may have overlooked.
Putting it back together
Now that we’re clear on these concepts, let’s see how this exercise works with a few example projects.
|
Enterprise-wide full SASE deployment |
Microsoft 365 adoption |
Custom web application deployment in AWS |
Platform |
A cloud-based application that enables adoption of all components defined in the SASE framework. Barracuda SecureEdge is an example of this. |
Microsoft 365 is part of Microsoft Online Services (MOS) and offers a range of productivity and intelligent cloud services from a single point of administration. |
AWS Amplify provides a suite of tools and services to help developers build applications. These applications can be integrated with other AWS services. |
Security and IT frameworks |
A cloud or SASE vendor to provide the platform. |
Microsoft applications and services. Third-party security and backup solutions. |
AWS applications and services. Web application security and API security that defend against OWASP Top 10 and other threats. |
There are many overlapping frameworks relevant to these projects, including enforceable regulations like HIPAA, PCI-DSS, and GDPR. The company may voluntarily adopt other frameworks to ensure the greatest possible security across the business. |
|||
Infrastructure |
Vendor-provided data centers and supporting hardware, software, and other resources. Secure internet connectivity between data centers and other facilities and secure internet access (SIA) at the endpoints that access the solution. |
Even an oversimplified breakdown like this can help you communicate project requirements to stakeholders and decision-makers. You can decide how exhaustive you need to be with this exercise, though I’d recommend making sure you get all the high-level pieces and required frameworks in place. At the very least you’ll want to map the things that will cost money and/or change the user experience.
Stakeholder communication isn’t the only reason to use this exercise. This kind of breakdown can improve your own understanding of a project and help you brainstorm solutions. It can also help you identify how a solution could be impacted by a change request.
If you are considering a SASE deployment or another cybersecurity initiative, visit www.barracuda.com for information on how we can help.

O Relatório de Perspetivas sobre Ransomware 2025
Principais conclusões sobre a experiência e o impacto do ransomware nas organizações em todo o mundo
Subscreva o Blogue Barracuda.
Inscreva-se para receber destaques sobre ameaças, comentários do setor e muito mais.

Segurança de Vulnerabilidades Geridas: Remediação mais rápida, menos riscos, conformidade mais fácil
Veja como pode ser fácil encontrar as vulnerabilidades que os cibercriminosos querem explorar