Architectures, Layers, and Controls
Physical Infrastructure Layer
Last Updated: March 16, 2026The physical security of the organisation’s infrastructure represents the foundational layer of the defence in depth architecture that no amount of logical security investment can...
Network, Server and End Point Layer
Last Updated: March 16, 2026The network, server, and endpoint security layers represent the core technical infrastructure of the organisation’s information security architecture, providing the logical equivalent of the physical...
Application and Process Layer
Last Updated: March 16, 2026Application security represents the security layer whose governance the Security Consulting function must address with particular strategic urgency, because the modern organisation’s business processes are...
Data and Information Layer
Last Updated: March 16, 2026Data is the ultimate object of the organisation’s security programme. Every physical security control that protects the facility, every network security architecture that governs the...
People and Identities Layer
Last Updated: March 16, 2026The access control and identity management architecture represents the convergence point where the technical security governance and the human security governance most directly intersect, because...
Network Security
Last Updated: March 16, 2026Network security governance represents one of the Security Consulting function’s most operationally consequential advisory domains, because the network infrastructure whose security architecture the organisation deploys...
User Privilege Management
Last Updated: March 16, 2026User privilege management represents one of the most consequential and most consistently inadequately governed security domains that the Security Consulting function encounters in its advisory...
Data Security and Privacy
Last Updated: March 16, 2026The preceding section addressed the technical architecture of data security through the control categories whose combined coverage protects the data across its operational lifecycle. This...
Effective System Monitoring
Last Updated: March 16, 2026Continuous monitoring of the organisation’s information and communications technology estate represents the operational intelligence function whose quality determines whether the security programme knows what is...
Cloud Computing
Last Updated: March 16, 2026Cloud computing has transformed the technology landscape so fundamentally that the Security Consulting function’s advisory on cloud security is no longer the specialist subject reserved...
Operational Technology (OT)
Last Updated: March 16, 2026Operational technology security represents one of the most consequential and most technically distinct advisory domains that the Security Consulting function must govern, because the security...
Autonomous Edge Computing
Last Updated: March 16, 2026Edge computing represents one of the most significant emerging technology transitions whose security implications the Security Consulting function must advise on with the specific operational...
Critical Infrastructure Protection
Last Updated: March 16, 2026Critical infrastructure represents the category of assets whose security the Security Consulting function must address with the most consequential governance priority available, because the disruption...
Zero Trust Model
Last Updated: March 16, 2026Zero trust represents the most significant architectural shift in enterprise security thinking since the perimeter model whose replacement the zero trust philosophy advocates, and the...
AI and Generative AI
Last Updated: March 16, 2026Artificial intelligence and generative AI represent the technology adoption whose governance implications the Security Consulting function must address with greater urgency and greater strategic depth...
Distributed Ledger Technology (DLT)
Last Updated: March 16, 2026Distributed Ledger Technology represents one of the more technically novel adoption decisions that the Security Consulting function will be asked to advise on, combining the...
The Convergent Future
Last Updated: March 16, 2026There is a particular moment in the history of any transformative technology when the most interesting question shifts from what the technology can do in...