A security architect designs the controls, boundaries and patterns that let an organisation operate safely, and defends those designs to engineers, executives and auditors. This track covers the whole role in six stages: the mental models and frameworks architects reason with, identity as the new perimeter, network and cloud security design, detection and response architecture, resilience against the worst day, and the governance, risk and communication that make a design stick. Every lesson ends with an action step that builds a portfolio artefact.

For security engineers, analysts and infrastructure architects who want to move from implementing controls to designing them.

Modules

Foundations of Security Architecture

Lessons

• The Security Architect’s Job Preview
• Threat Modelling as a Design Method
• Frameworks, Principles and Reference Architectures

Identity and Access Architecture

Lessons

• Identity as the Perimeter
• Authorisation, Privilege and Zero Trust
• Secrets, Keys and Cryptographic Architecture

Network and Infrastructure Security

Lessons

• Segmentation and Boundary Design
• Endpoint and Workload Security
• Cloud Security Architecture

Detection and Response Architecture

Lessons

• Designing for Visibility
• Detection Engineering and the SOC
• Incident Response Architecture

Resilience and Secure Delivery

Lessons

• Assume Breach and Design for Recovery
• Securing the Software Supply Chain
• Application Security Architecture

Governance Risk and Leadership

Lessons

• Risk Management for Architects
• Compliance, Audit and Third Parties
• Communicating Security Architecture