OSA IT security architecture patterns are based on architectural overview diagrams depicting a certain information usage context. These diagrams are then annotated with references to the NIST controls catalog.

Some patterns that get used repeatedly across many IT Security Architectures are called modules. Examples are the Client as well as the Server module. By breaking up in this way we can keep the majority of patterns much simpler to read and understand, and make building and maintaining patterns easier too.