Skip to content

Security Architecture

What is Security Architecture?

The design artefacts that describe how security controls are positioned and relate to the overall IT architecture. Security architecture provides a structured approach to designing, implementing, and maintaining security across an organisation.

Information Security

Each of these is named in at least one of the same controls as security architecture. The number is how many controls name both.

What the standards actually require on security architecture

Requirements naming security architecture across 6 standards, quoted from the control text.

For each system the applicant develops the system security architecture (elements, roles, responsibilities and interrelationships implementing the measures) and its security measures and requirements, allocating further to sub-systems and items as needed, cons...

do-326a-ed-202a::SSAM · System Security Architecture and Measures →
Spain ENS3 controls

Security is planned integrally, documenting facilities and access points, the system (equipment, internal networks, external connections, workstations and consoles), the lines of defence (interconnections, firewalls, DMZ, diverse technologies) and the identifi...

spain-ens::op.pl.2 · Documented security architecture, management system and data validation →

Define the overall 5G security architecture covering UE, RAN, core network, and service-based interfaces with documented trust boundaries.

TS33.501-4.1 · 5G Security Architecture Overview →

The security architecture is built from security domains mapped onto power system domains, system interface categories mapped onto the TC 57 architecture, and security controls (the Figure 9 overview) mapped to domains, with a method to determine the controls...

iec-62351-power-systems-communication-security::10:5 · Part 10, clause 5: security architecture in power systems (security domains and their mapping, system interface categories, security controls and their domain mapping, determination of controls, network-based controls) →

ITU-T Recommendation X.805 (10/2003), whose full title is in the framework name, is a foundational network security architecture standard published in October 2003 by ITU-T, the standardization arm of the International Telecommunication Union for telecommunica...

X805-Scope-Architecture-3Layers-3Planes-8Dimensions-5Threats-72Cells-X.800-Series-Heritage · ITU-T X.805 Scope + Security Architecture Overview + 3 Security Layers x 3 Security Planes (9 Modules) x 8 Security Dimensions = 72 Security Perspectives + 5 Threat Categories + X.800-Series Heritage + End-to-End Network Communications →

Questions people ask about security architecture

What is Security Architecture?
The design artefacts that describe how security controls are positioned and relate to the overall IT architecture. Security architecture provides a structured approach to designing, implementing, and maintaining security across an organisation.
Why is Security Architecture important for compliance?
Security Architecture is a key concept in Information Security. Understanding security architecture helps organizations meet regulatory requirements, reduce risk, and demonstrate due diligence during audits. Our compliance platform maps 1,016 frameworks with 316K cross-framework control mappings.
Which compliance frameworks address Security Architecture?
Security Architecture appears in the requirement text of New Zealand Information Security Manual (NZISM), DO-326A / ED-202A, Spain ENS, 3GPP 5G Security Architecture (TS 33.501), IEC 62351 - Power Systems Communication Security. Across these standards we have identified 24 controls that name it directly, each linked to the control text on the compliance platform.
Where can I learn more about Security Architecture?
Explore our compliance framework pages to see how security architecture applies across different standards and regulations. Our implementation guides provide step-by-step guidance, and the compliance platform offers AI-powered analysis of how this concept maps across 1,016 frameworks.

See how Security Architecture applies across compliance frameworks

Our platform maps 1,016 frameworks with 316K cross-framework control mappings. Explore how this concept is addressed across standards.

Written and maintained by Gerard Blokdyk, The Art of Service.