OSA Taxonomy

How OSA entities and relationships connect to broader security concepts.

The OSA Taxonomy illustrates entities and relationships pertinent to OSA, clarifying how OSA connects to other security concepts and informing our future development directions.

Key Description

The main value that OSA brings you is in relating controls to security architecture, by helping to identify common patterns that occur when you design security architectures.

Current Focus Areas

  • Controls (via our control catalogue)
  • Patterns (via our pattern landscape)

Planned Expansions

We intend to: - Map to additional frameworks including PCI-DSS, FSA, and APRA - Develop standardized generic policies and control objectives - Expand the threat catalog - Supplement controls with testing procedures - Support IT strategy formulation for Information Security Management System planning

Note: The SVG diagram requires modern browsers (Firefox, Safari, Opera) for full interactive functionality with hyperlinked definitions.