SABSA and TOGAF are often placed side by side in security-architecture discussions, but they are not simply competing versions of the same framework. SABSA is […]
Cybersecurity
ISC2 ISSAP: Threat Modeling for Security Architects
Threat modeling for a security architect is not a one-time exercise that produces a list of attack names. It is a structured way to understand […]
ISC2 ISSAP: Enterprise IAM Architecture
Enterprise IAM architecture is the design that connects identity sources, authentication, authorization, privileged access, federation, customer identity, machine identity, and audit into one governed system. […]
Microsoft MD-102: Intune Compliance, Conditional Access, and Windows LAPS
Modern endpoint trust is not one control. Microsoft Intune compliance evaluates whether a managed device meets defined requirements, Microsoft Entra Conditional Access uses that compliance […]
Amazon AWS SCS-C03: How AWS IAM Policy Types Work Together
AWS authorization is difficult when policy documents are treated as independent switches. An identity policy can allow an action and the request can still be […]
Amazon AWS SCS-C03: WAF, Shield, Network Firewall, and Firewall Manager
AWS WAF, AWS Shield, AWS Network Firewall, and AWS Firewall Manager are often grouped together as “firewall services,” but they operate at different layers and […]
Amazon AWS SCS-C03: Choosing an AWS Security Log Platform
AWS security logging is not a choice between three interchangeable log stores. CloudTrail Lake, CloudWatch Logs, and Amazon Security Lake were designed around different data […]
Amazon AWS SCS-C03: Config, Security Hub, or Audit Manager?
AWS Config, AWS Security Hub, and AWS Audit Manager can all appear in a cloud-governance architecture, but they answer different questions. Config records how AWS […]
Microsoft PL-300: Securing Power BI Workspaces and Data
Power BI security is layered. Workspace roles control collaboration, item and semantic-model permissions control who can use content, row-level security limits which rows some consumers […]
Microsoft DP-600: Fabric Security Layers
Microsoft Fabric security is layered. Workspace roles, item permissions, OneLake security, semantic-model roles, and SQL-endpoint controls can all affect access, but they do not have […]
Microsoft SC-100: Ransomware-Resilient Cloud Architecture
Ransomware resilience is an architecture problem, not just a backup problem. The current Microsoft SC-100 scope explicitly includes secure backup and restore, privileged access, business […]
Microsoft SC-100: How Microsoft’s Security Frameworks Fit Together
Microsoft publishes several security frameworks and architectural resources that solve different planning problems. The current Microsoft SC-100 guide explicitly expects architects to align solutions with […]
Microsoft SC-100: Securing AI Workloads in Microsoft Cloud
AI workload security now spans identity, model access, data governance, networking, APIs, software supply chain, prompts, agents, and generated output. The current Microsoft SC-100 guide […]
CompTIA CAS-005: Zero Trust, SASE, and SSE
Zero Trust, Secure Access Service Edge (SASE), and Security Service Edge (SSE) are frequently grouped together because all three influence how modern organizations protect users, […]
CompTIA CAS-005: Threat Modeling with STRIDE, DREAD, and Attack Trees
Threat modeling turns an architecture diagram into a structured security conversation. Instead of waiting for a penetration test or incident to reveal design weaknesses, the […]