Security Patterns

Security patterns are architectural blueprints that address common security challenges. Each pattern includes a diagram, implementation guidance, and mapped NIST 800-53 controls.

Foundation

What must exist before anything else can work 7 patterns

Information Security Management System (ISMS) Module

Board of Directors Room

PCI Full Environment

Security Metrics and Measurement

Awareness and Training Pattern

Realtime Collaboration Pattern

Third Party Risk Management

Protect

The asset classes to secure, ordered by ZTA pillar 32 patterns

Identity Management Pattern

Modern Authentication

Passkey Authentication

Privileged User Management

SaaS Identity Lifecycle Management

Client Module

Privacy Mobile Device Pattern

Wireless Private Network Pattern

Wireless Public Hotspot Pattern

iPhone Pattern

DMZ Module

Industrial Control Systems

Secure Remote Working

Secure Network Zone Module

Zero Trust Architecture

SOA Publication and Location Pattern

SOA Internal Service Usage Pattern

Public Web Server Pattern

Secure Software Development Lifecycle

Secure DevOps Pipeline

API Security

Data Security Pattern

Secure Ad-Hoc File Exchange Pattern

Email Transport Layer Security (TLS) Pattern

Client-Side Encryption and Data Privacy

Post-Quantum Cryptography and Quantum Readiness

Server Module

Cloud Computing Pattern

Secure LLM Usage

AI Governance and Responsible AI

Secure Agentic AI Frameworks

Offensive AI and Deepfake Defence

Operate

Continuous detection, response and resilience 7 patterns

Advanced Monitoring and Detection

Security Monitoring and Response

Offensive Security Testing

Vulnerability Management and Patching

External Attack Surface Management

Cyber Resilience

Incident Response