https://www.opensecurityarchitecture.org/https://www.opensecurityarchitecture.org/about/https://www.opensecurityarchitecture.org/about/core-team/https://www.opensecurityarchitecture.org/about/faq/https://www.opensecurityarchitecture.org/about/license-terms/https://www.opensecurityarchitecture.org/about/privacy-policy/https://www.opensecurityarchitecture.org/about/terms-of-use/https://www.opensecurityarchitecture.org/about/who-uses-osa/https://www.opensecurityarchitecture.org/about/why-have-osa/https://www.opensecurityarchitecture.org/api/https://www.opensecurityarchitecture.org/attack/https://www.opensecurityarchitecture.org/blog/https://www.opensecurityarchitecture.org/blog/2/https://www.opensecurityarchitecture.org/blog/3/https://www.opensecurityarchitecture.org/blog/4/https://www.opensecurityarchitecture.org/blog/5/https://www.opensecurityarchitecture.org/blog/6/https://www.opensecurityarchitecture.org/blog/7/https://www.opensecurityarchitecture.org/blog/another-day-another-large-scale-hack/https://www.opensecurityarchitecture.org/blog/better-printing-for-patterns/https://www.opensecurityarchitecture.org/blog/blockchain-security-architecture-from-tokenised-assets-to-digital-currencies/https://www.opensecurityarchitecture.org/blog/building-the-most-machine-readable-security-architecture-on-the-internet/https://www.opensecurityarchitecture.org/blog/client-module-updated/https://www.opensecurityarchitecture.org/blog/client-side-encryption-protecting-user-data-you-never-see/https://www.opensecurityarchitecture.org/blog/cloud-computing-research/https://www.opensecurityarchitecture.org/blog/cloud-pattern-finalised/https://www.opensecurityarchitecture.org/blog/declassified-1970-us-dod-cybersecurity-document-still-relevant/https://www.opensecurityarchitecture.org/blog/describe-your-experience-in-your-own-blog-statements/https://www.opensecurityarchitecture.org/blog/draft-pattern-soa-internal-usage/https://www.opensecurityarchitecture.org/blog/external-attack-surface-management-what-is-mature-and-what-is-next/https://www.opensecurityarchitecture.org/blog/february-2011-open-security-architecture-newsletter/https://www.opensecurityarchitecture.org/blog/foundations-redesign-capability-model-and-archive/https://www.opensecurityarchitecture.org/blog/framework-mappings-and-coverage-analysis-for-21-compliance-frameworks/https://www.opensecurityarchitecture.org/blog/from-controls-to-currency-the-case-for-quantified-risk-in-security-architecture/https://www.opensecurityarchitecture.org/blog/how-to-hack-an-atm/https://www.opensecurityarchitecture.org/blog/introducing-security-maturity-assessments/https://www.opensecurityarchitecture.org/blog/iso-and-cobit-mapping/https://www.opensecurityarchitecture.org/blog/looking-for-contributors-for-the-secure-development-pattern/https://www.opensecurityarchitecture.org/blog/metadata-for-images/https://www.opensecurityarchitecture.org/blog/more-scada-vulnerabilities/https://www.opensecurityarchitecture.org/blog/new-data-security-pattern/https://www.opensecurityarchitecture.org/blog/new-definition-pages-security-architecture-and-it-risk/https://www.opensecurityarchitecture.org/blog/new-front-page-image/https://www.opensecurityarchitecture.org/blog/new-icon-library-pci-dss-and-whats-next/https://www.opensecurityarchitecture.org/blog/new-icon-white-hat/https://www.opensecurityarchitecture.org/blog/new-icons-black-hat-and-iphone/https://www.opensecurityarchitecture.org/blog/new-icons/https://www.opensecurityarchitecture.org/blog/new-pattern-identity-management/https://www.opensecurityarchitecture.org/blog/new-pattern-modules/https://www.opensecurityarchitecture.org/blog/new-patterns/https://www.opensecurityarchitecture.org/blog/openid-support/https://www.opensecurityarchitecture.org/blog/oreilly-cloud-computing-book/https://www.opensecurityarchitecture.org/blog/osa-ai-security-suite/https://www.opensecurityarchitecture.org/blog/osa-changes/https://www.opensecurityarchitecture.org/blog/osa-news-january-09/https://www.opensecurityarchitecture.org/blog/osa-presentation-at-owasp-chapter-meeting/https://www.opensecurityarchitecture.org/blog/osa-reborn-modern-platform-same-mission/https://www.opensecurityarchitecture.org/blog/secure-scrum/https://www.opensecurityarchitecture.org/blog/security-requirements/https://www.opensecurityarchitecture.org/blog/serious-security-holes-in-siemens-control-systems/https://www.opensecurityarchitecture.org/blog/server-module-updated/https://www.opensecurityarchitecture.org/blog/site-refresh/https://www.opensecurityarchitecture.org/blog/site-update-new-template/https://www.opensecurityarchitecture.org/blog/slow-progress-of-late/https://www.opensecurityarchitecture.org/blog/small-addition-to-the-icon-library/https://www.opensecurityarchitecture.org/blog/soa-security-risks/https://www.opensecurityarchitecture.org/blog/sony-and-amazon-outages/https://www.opensecurityarchitecture.org/blog/sp-028-secure-devops-pipeline-pattern/https://www.opensecurityarchitecture.org/blog/still-live-considering-next-development-steps/https://www.opensecurityarchitecture.org/blog/summary-of-recent-changes-to-the-site/https://www.opensecurityarchitecture.org/blog/summer-hibernation/https://www.opensecurityarchitecture.org/blog/trials-and-tribulations-of-tcpdf/https://www.opensecurityarchitecture.org/blog/twitter-hack-causes-markets-to-plunge/https://www.opensecurityarchitecture.org/blog/uniquely-id-a-browser-via-fingerprint/https://www.opensecurityarchitecture.org/blog/update-the-control-icons-on-patterns/https://www.opensecurityarchitecture.org/blog/update-to-patterns/https://www.opensecurityarchitecture.org/blog/updated-icon-pack/https://www.opensecurityarchitecture.org/blog/updated-pattern-naming-convention/https://www.opensecurityarchitecture.org/blog/which-actors-for-which-controls/https://www.opensecurityarchitecture.org/blog/yep-still-slow-going/https://www.opensecurityarchitecture.org/brand/https://www.opensecurityarchitecture.org/controls/https://www.opensecurityarchitecture.org/controls/ac-01/https://www.opensecurityarchitecture.org/controls/ac-02/https://www.opensecurityarchitecture.org/controls/ac-03/https://www.opensecurityarchitecture.org/controls/ac-04/https://www.opensecurityarchitecture.org/controls/ac-05/https://www.opensecurityarchitecture.org/controls/ac-06/https://www.opensecurityarchitecture.org/controls/ac-07/https://www.opensecurityarchitecture.org/controls/ac-08/https://www.opensecurityarchitecture.org/controls/ac-09/https://www.opensecurityarchitecture.org/controls/ac-10/https://www.opensecurityarchitecture.org/controls/ac-11/https://www.opensecurityarchitecture.org/controls/ac-12/https://www.opensecurityarchitecture.org/controls/ac-13/https://www.opensecurityarchitecture.org/controls/ac-14/https://www.opensecurityarchitecture.org/controls/ac-15/https://www.opensecurityarchitecture.org/controls/ac-16/https://www.opensecurityarchitecture.org/controls/ac-17/https://www.opensecurityarchitecture.org/controls/ac-18/https://www.opensecurityarchitecture.org/controls/ac-19/https://www.opensecurityarchitecture.org/controls/ac-20/https://www.opensecurityarchitecture.org/controls/ac-21/https://www.opensecurityarchitecture.org/controls/ac-22/https://www.opensecurityarchitecture.org/controls/ac-23/https://www.opensecurityarchitecture.org/controls/ac-24/https://www.opensecurityarchitecture.org/controls/ac-25/https://www.opensecurityarchitecture.org/controls/at-01/https://www.opensecurityarchitecture.org/controls/at-02/https://www.opensecurityarchitecture.org/controls/at-03/https://www.opensecurityarchitecture.org/controls/at-04/https://www.opensecurityarchitecture.org/controls/at-05/https://www.opensecurityarchitecture.org/controls/at-06/https://www.opensecurityarchitecture.org/controls/au-01/https://www.opensecurityarchitecture.org/controls/au-02/https://www.opensecurityarchitecture.org/controls/au-03/https://www.opensecurityarchitecture.org/controls/au-04/https://www.opensecurityarchitecture.org/controls/au-05/https://www.opensecurityarchitecture.org/controls/au-06/https://www.opensecurityarchitecture.org/controls/au-07/https://www.opensecurityarchitecture.org/controls/au-08/https://www.opensecurityarchitecture.org/controls/au-09/https://www.opensecurityarchitecture.org/controls/au-10/https://www.opensecurityarchitecture.org/controls/au-11/https://www.opensecurityarchitecture.org/controls/au-12/https://www.opensecurityarchitecture.org/controls/au-13/https://www.opensecurityarchitecture.org/controls/au-14/https://www.opensecurityarchitecture.org/controls/au-15/https://www.opensecurityarchitecture.org/controls/au-16/https://www.opensecurityarchitecture.org/controls/ca-01/https://www.opensecurityarchitecture.org/controls/ca-02/https://www.opensecurityarchitecture.org/controls/ca-03/https://www.opensecurityarchitecture.org/controls/ca-04/https://www.opensecurityarchitecture.org/controls/ca-05/https://www.opensecurityarchitecture.org/controls/ca-06/https://www.opensecurityarchitecture.org/controls/ca-07/https://www.opensecurityarchitecture.org/controls/ca-08/https://www.opensecurityarchitecture.org/controls/ca-09/https://www.opensecurityarchitecture.org/controls/cm-01/https://www.opensecurityarchitecture.org/controls/cm-02/https://www.opensecurityarchitecture.org/controls/cm-03/https://www.opensecurityarchitecture.org/controls/cm-04/https://www.opensecurityarchitecture.org/controls/cm-05/https://www.opensecurityarchitecture.org/controls/cm-06/https://www.opensecurityarchitecture.org/controls/cm-07/https://www.opensecurityarchitecture.org/controls/cm-08/https://www.opensecurityarchitecture.org/controls/cm-09/https://www.opensecurityarchitecture.org/controls/cm-10/https://www.opensecurityarchitecture.org/controls/cm-11/https://www.opensecurityarchitecture.org/controls/cm-12/https://www.opensecurityarchitecture.org/controls/cm-13/https://www.opensecurityarchitecture.org/controls/cm-14/https://www.opensecurityarchitecture.org/controls/cp-01/https://www.opensecurityarchitecture.org/controls/cp-02/https://www.opensecurityarchitecture.org/controls/cp-03/https://www.opensecurityarchitecture.org/controls/cp-04/https://www.opensecurityarchitecture.org/controls/cp-05/https://www.opensecurityarchitecture.org/controls/cp-06/https://www.opensecurityarchitecture.org/controls/cp-07/https://www.opensecurityarchitecture.org/controls/cp-08/https://www.opensecurityarchitecture.org/controls/cp-09/https://www.opensecurityarchitecture.org/controls/cp-10/https://www.opensecurityarchitecture.org/controls/cp-11/https://www.opensecurityarchitecture.org/controls/cp-12/https://www.opensecurityarchitecture.org/controls/cp-13/https://www.opensecurityarchitecture.org/controls/ia-01/https://www.opensecurityarchitecture.org/controls/ia-02/https://www.opensecurityarchitecture.org/controls/ia-03/https://www.opensecurityarchitecture.org/controls/ia-04/https://www.opensecurityarchitecture.org/controls/ia-05/https://www.opensecurityarchitecture.org/controls/ia-06/https://www.opensecurityarchitecture.org/controls/ia-07/https://www.opensecurityarchitecture.org/controls/ia-08/https://www.opensecurityarchitecture.org/controls/ia-09/https://www.opensecurityarchitecture.org/controls/ia-10/https://www.opensecurityarchitecture.org/controls/ia-11/https://www.opensecurityarchitecture.org/controls/ia-12/https://www.opensecurityarchitecture.org/controls/ir-01/https://www.opensecurityarchitecture.org/controls/ir-02/https://www.opensecurityarchitecture.org/controls/ir-03/https://www.opensecurityarchitecture.org/controls/ir-04/https://www.opensecurityarchitecture.org/controls/ir-05/https://www.opensecurityarchitecture.org/controls/ir-06/https://www.opensecurityarchitecture.org/controls/ir-07/https://www.opensecurityarchitecture.org/controls/ir-08/https://www.opensecurityarchitecture.org/controls/ir-09/https://www.opensecurityarchitecture.org/controls/ma-01/https://www.opensecurityarchitecture.org/controls/ma-02/https://www.opensecurityarchitecture.org/controls/ma-03/https://www.opensecurityarchitecture.org/controls/ma-04/https://www.opensecurityarchitecture.org/controls/ma-05/https://www.opensecurityarchitecture.org/controls/ma-06/https://www.opensecurityarchitecture.org/controls/ma-07/https://www.opensecurityarchitecture.org/controls/mp-01/https://www.opensecurityarchitecture.org/controls/mp-02/https://www.opensecurityarchitecture.org/controls/mp-03/https://www.opensecurityarchitecture.org/controls/mp-04/https://www.opensecurityarchitecture.org/controls/mp-05/https://www.opensecurityarchitecture.org/controls/mp-06/https://www.opensecurityarchitecture.org/controls/mp-07/https://www.opensecurityarchitecture.org/controls/mp-08/https://www.opensecurityarchitecture.org/controls/pe-01/https://www.opensecurityarchitecture.org/controls/pe-02/https://www.opensecurityarchitecture.org/controls/pe-03/https://www.opensecurityarchitecture.org/controls/pe-04/https://www.opensecurityarchitecture.org/controls/pe-05/https://www.opensecurityarchitecture.org/controls/pe-06/https://www.opensecurityarchitecture.org/controls/pe-07/https://www.opensecurityarchitecture.org/controls/pe-08/https://www.opensecurityarchitecture.org/controls/pe-09/https://www.opensecurityarchitecture.org/controls/pe-10/https://www.opensecurityarchitecture.org/controls/pe-11/https://www.opensecurityarchitecture.org/controls/pe-12/https://www.opensecurityarchitecture.org/controls/pe-13/https://www.opensecurityarchitecture.org/controls/pe-14/https://www.opensecurityarchitecture.org/controls/pe-15/https://www.opensecurityarchitecture.org/controls/pe-16/https://www.opensecurityarchitecture.org/controls/pe-17/https://www.opensecurityarchitecture.org/controls/pe-18/https://www.opensecurityarchitecture.org/controls/pe-19/https://www.opensecurityarchitecture.org/controls/pe-20/https://www.opensecurityarchitecture.org/controls/pe-21/https://www.opensecurityarchitecture.org/controls/pe-22/https://www.opensecurityarchitecture.org/controls/pe-23/https://www.opensecurityarchitecture.org/controls/pl-01/https://www.opensecurityarchitecture.org/controls/pl-02/https://www.opensecurityarchitecture.org/controls/pl-03/https://www.opensecurityarchitecture.org/controls/pl-04/https://www.opensecurityarchitecture.org/controls/pl-05/https://www.opensecurityarchitecture.org/controls/pl-06/https://www.opensecurityarchitecture.org/controls/pl-07/https://www.opensecurityarchitecture.org/controls/pl-08/https://www.opensecurityarchitecture.org/controls/pl-09/https://www.opensecurityarchitecture.org/controls/pl-10/https://www.opensecurityarchitecture.org/controls/pl-11/https://www.opensecurityarchitecture.org/controls/pm-01/https://www.opensecurityarchitecture.org/controls/pm-02/https://www.opensecurityarchitecture.org/controls/pm-03/https://www.opensecurityarchitecture.org/controls/pm-04/https://www.opensecurityarchitecture.org/controls/pm-05/https://www.opensecurityarchitecture.org/controls/pm-06/https://www.opensecurityarchitecture.org/controls/pm-07/https://www.opensecurityarchitecture.org/controls/pm-08/https://www.opensecurityarchitecture.org/controls/pm-09/https://www.opensecurityarchitecture.org/controls/pm-10/https://www.opensecurityarchitecture.org/controls/pm-11/https://www.opensecurityarchitecture.org/controls/pm-12/https://www.opensecurityarchitecture.org/controls/pm-13/https://www.opensecurityarchitecture.org/controls/pm-14/https://www.opensecurityarchitecture.org/controls/pm-15/https://www.opensecurityarchitecture.org/controls/pm-16/https://www.opensecurityarchitecture.org/controls/pm-17/https://www.opensecurityarchitecture.org/controls/pm-18/https://www.opensecurityarchitecture.org/controls/pm-19/https://www.opensecurityarchitecture.org/controls/pm-20/https://www.opensecurityarchitecture.org/controls/pm-21/https://www.opensecurityarchitecture.org/controls/pm-22/https://www.opensecurityarchitecture.org/controls/pm-23/https://www.opensecurityarchitecture.org/controls/pm-24/https://www.opensecurityarchitecture.org/controls/pm-25/https://www.opensecurityarchitecture.org/controls/pm-26/https://www.opensecurityarchitecture.org/controls/pm-27/https://www.opensecurityarchitecture.org/controls/pm-28/https://www.opensecurityarchitecture.org/controls/pm-29/https://www.opensecurityarchitecture.org/controls/pm-30/https://www.opensecurityarchitecture.org/controls/pm-31/https://www.opensecurityarchitecture.org/controls/pm-32/https://www.opensecurityarchitecture.org/controls/ps-01/https://www.opensecurityarchitecture.org/controls/ps-02/https://www.opensecurityarchitecture.org/controls/ps-03/https://www.opensecurityarchitecture.org/controls/ps-04/https://www.opensecurityarchitecture.org/controls/ps-05/https://www.opensecurityarchitecture.org/controls/ps-06/https://www.opensecurityarchitecture.org/controls/ps-07/https://www.opensecurityarchitecture.org/controls/ps-08/https://www.opensecurityarchitecture.org/controls/ps-09/https://www.opensecurityarchitecture.org/controls/pt-01/https://www.opensecurityarchitecture.org/controls/pt-02/https://www.opensecurityarchitecture.org/controls/pt-03/https://www.opensecurityarchitecture.org/controls/pt-04/https://www.opensecurityarchitecture.org/controls/pt-05/https://www.opensecurityarchitecture.org/controls/pt-06/https://www.opensecurityarchitecture.org/controls/pt-07/https://www.opensecurityarchitecture.org/controls/pt-08/https://www.opensecurityarchitecture.org/controls/ra-01/https://www.opensecurityarchitecture.org/controls/ra-02/https://www.opensecurityarchitecture.org/controls/ra-03/https://www.opensecurityarchitecture.org/controls/ra-04/https://www.opensecurityarchitecture.org/controls/ra-05/https://www.opensecurityarchitecture.org/controls/ra-06/https://www.opensecurityarchitecture.org/controls/ra-07/https://www.opensecurityarchitecture.org/controls/ra-08/https://www.opensecurityarchitecture.org/controls/ra-09/https://www.opensecurityarchitecture.org/controls/ra-10/https://www.opensecurityarchitecture.org/controls/sa-01/https://www.opensecurityarchitecture.org/controls/sa-02/https://www.opensecurityarchitecture.org/controls/sa-03/https://www.opensecurityarchitecture.org/controls/sa-04/https://www.opensecurityarchitecture.org/controls/sa-05/https://www.opensecurityarchitecture.org/controls/sa-06/https://www.opensecurityarchitecture.org/controls/sa-07/https://www.opensecurityarchitecture.org/controls/sa-08/https://www.opensecurityarchitecture.org/controls/sa-09/https://www.opensecurityarchitecture.org/controls/sa-10/https://www.opensecurityarchitecture.org/controls/sa-11/https://www.opensecurityarchitecture.org/controls/sa-15/https://www.opensecurityarchitecture.org/controls/sa-16/https://www.opensecurityarchitecture.org/controls/sa-17/https://www.opensecurityarchitecture.org/controls/sa-20/https://www.opensecurityarchitecture.org/controls/sa-21/https://www.opensecurityarchitecture.org/controls/sa-22/https://www.opensecurityarchitecture.org/controls/sa-23/https://www.opensecurityarchitecture.org/controls/sc-01/https://www.opensecurityarchitecture.org/controls/sc-02/https://www.opensecurityarchitecture.org/controls/sc-03/https://www.opensecurityarchitecture.org/controls/sc-04/https://www.opensecurityarchitecture.org/controls/sc-05/https://www.opensecurityarchitecture.org/controls/sc-06/https://www.opensecurityarchitecture.org/controls/sc-07/https://www.opensecurityarchitecture.org/controls/sc-08/https://www.opensecurityarchitecture.org/controls/sc-09/https://www.opensecurityarchitecture.org/controls/sc-10/https://www.opensecurityarchitecture.org/controls/sc-11/https://www.opensecurityarchitecture.org/controls/sc-12/https://www.opensecurityarchitecture.org/controls/sc-13/https://www.opensecurityarchitecture.org/controls/sc-14/https://www.opensecurityarchitecture.org/controls/sc-15/https://www.opensecurityarchitecture.org/controls/sc-16/https://www.opensecurityarchitecture.org/controls/sc-17/https://www.opensecurityarchitecture.org/controls/sc-18/https://www.opensecurityarchitecture.org/controls/sc-19/https://www.opensecurityarchitecture.org/controls/sc-20/https://www.opensecurityarchitecture.org/controls/sc-21/https://www.opensecurityarchitecture.org/controls/sc-22/https://www.opensecurityarchitecture.org/controls/sc-23/https://www.opensecurityarchitecture.org/controls/sc-24/https://www.opensecurityarchitecture.org/controls/sc-25/https://www.opensecurityarchitecture.org/controls/sc-26/https://www.opensecurityarchitecture.org/controls/sc-27/https://www.opensecurityarchitecture.org/controls/sc-28/https://www.opensecurityarchitecture.org/controls/sc-29/https://www.opensecurityarchitecture.org/controls/sc-30/https://www.opensecurityarchitecture.org/controls/sc-31/https://www.opensecurityarchitecture.org/controls/sc-32/https://www.opensecurityarchitecture.org/controls/sc-34/https://www.opensecurityarchitecture.org/controls/sc-35/https://www.opensecurityarchitecture.org/controls/sc-36/https://www.opensecurityarchitecture.org/controls/sc-37/https://www.opensecurityarchitecture.org/controls/sc-38/https://www.opensecurityarchitecture.org/controls/sc-39/https://www.opensecurityarchitecture.org/controls/sc-40/https://www.opensecurityarchitecture.org/controls/sc-41/https://www.opensecurityarchitecture.org/controls/sc-42/https://www.opensecurityarchitecture.org/controls/sc-43/https://www.opensecurityarchitecture.org/controls/sc-44/https://www.opensecurityarchitecture.org/controls/sc-45/https://www.opensecurityarchitecture.org/controls/sc-46/https://www.opensecurityarchitecture.org/controls/sc-47/https://www.opensecurityarchitecture.org/controls/sc-48/https://www.opensecurityarchitecture.org/controls/sc-49/https://www.opensecurityarchitecture.org/controls/sc-50/https://www.opensecurityarchitecture.org/controls/sc-51/https://www.opensecurityarchitecture.org/controls/si-01/https://www.opensecurityarchitecture.org/controls/si-02/https://www.opensecurityarchitecture.org/controls/si-03/https://www.opensecurityarchitecture.org/controls/si-04/https://www.opensecurityarchitecture.org/controls/si-05/https://www.opensecurityarchitecture.org/controls/si-06/https://www.opensecurityarchitecture.org/controls/si-07/https://www.opensecurityarchitecture.org/controls/si-08/https://www.opensecurityarchitecture.org/controls/si-09/https://www.opensecurityarchitecture.org/controls/si-10/https://www.opensecurityarchitecture.org/controls/si-11/https://www.opensecurityarchitecture.org/controls/si-12/https://www.opensecurityarchitecture.org/controls/si-13/https://www.opensecurityarchitecture.org/controls/si-14/https://www.opensecurityarchitecture.org/controls/si-15/https://www.opensecurityarchitecture.org/controls/si-16/https://www.opensecurityarchitecture.org/controls/si-17/https://www.opensecurityarchitecture.org/controls/si-18/https://www.opensecurityarchitecture.org/controls/si-19/https://www.opensecurityarchitecture.org/controls/si-20/https://www.opensecurityarchitecture.org/controls/si-21/https://www.opensecurityarchitecture.org/controls/si-22/https://www.opensecurityarchitecture.org/controls/si-23/https://www.opensecurityarchitecture.org/controls/sr-01/https://www.opensecurityarchitecture.org/controls/sr-02/https://www.opensecurityarchitecture.org/controls/sr-03/https://www.opensecurityarchitecture.org/controls/sr-04/https://www.opensecurityarchitecture.org/controls/sr-05/https://www.opensecurityarchitecture.org/controls/sr-06/https://www.opensecurityarchitecture.org/controls/sr-07/https://www.opensecurityarchitecture.org/controls/sr-08/https://www.opensecurityarchitecture.org/controls/sr-09/https://www.opensecurityarchitecture.org/controls/sr-10/https://www.opensecurityarchitecture.org/controls/sr-11/https://www.opensecurityarchitecture.org/controls/sr-12/https://www.opensecurityarchitecture.org/definitions/https://www.opensecurityarchitecture.org/definitions/glossary/https://www.opensecurityarchitecture.org/definitions/it-architecture/https://www.opensecurityarchitecture.org/definitions/it-risk/https://www.opensecurityarchitecture.org/definitions/it-security-architecture/https://www.opensecurityarchitecture.org/definitions/it-security/https://www.opensecurityarchitecture.org/definitions/security_patterns/https://www.opensecurityarchitecture.org/definitions/security-requirements/https://www.opensecurityarchitecture.org/foundations/https://www.opensecurityarchitecture.org/foundations/acceptable-use-policy/https://www.opensecurityarchitecture.org/foundations/capability-model/https://www.opensecurityarchitecture.org/foundations/design-principles/https://www.opensecurityarchitecture.org/foundations/how-to-use/https://www.opensecurityarchitecture.org/foundations/icons/https://www.opensecurityarchitecture.org/foundations/information-security-policy/https://www.opensecurityarchitecture.org/foundations/osa-actors/https://www.opensecurityarchitecture.org/foundations/osa-landscape/https://www.opensecurityarchitecture.org/foundations/osa-lifecycle/https://www.opensecurityarchitecture.org/foundations/policy-templates/https://www.opensecurityarchitecture.org/frameworks/https://www.opensecurityarchitecture.org/frameworks/anssi/https://www.opensecurityarchitecture.org/frameworks/anssi/controls/https://www.opensecurityarchitecture.org/frameworks/anssi/coverage/https://www.opensecurityarchitecture.org/frameworks/api-1164/https://www.opensecurityarchitecture.org/frameworks/api-1164/controls/https://www.opensecurityarchitecture.org/frameworks/api-1164/coverage/https://www.opensecurityarchitecture.org/frameworks/apra-cps-234/https://www.opensecurityarchitecture.org/frameworks/apra-cps-234/controls/https://www.opensecurityarchitecture.org/frameworks/apra-cps-234/coverage/https://www.opensecurityarchitecture.org/frameworks/asd-essential-eight/https://www.opensecurityarchitecture.org/frameworks/asd-essential-eight/controls/https://www.opensecurityarchitecture.org/frameworks/asd-essential-eight/coverage/https://www.opensecurityarchitecture.org/frameworks/awia/https://www.opensecurityarchitecture.org/frameworks/awia/controls/https://www.opensecurityarchitecture.org/frameworks/awia/coverage/https://www.opensecurityarchitecture.org/frameworks/basel-sco60/https://www.opensecurityarchitecture.org/frameworks/basel-sco60/controls/https://www.opensecurityarchitecture.org/frameworks/basel-sco60/coverage/https://www.opensecurityarchitecture.org/frameworks/bcbs-239/https://www.opensecurityarchitecture.org/frameworks/bcbs-239/controls/https://www.opensecurityarchitecture.org/frameworks/bcbs-239/coverage/https://www.opensecurityarchitecture.org/frameworks/bio2/https://www.opensecurityarchitecture.org/frameworks/bio2/controls/https://www.opensecurityarchitecture.org/frameworks/bio2/coverage/https://www.opensecurityarchitecture.org/frameworks/bog-cisd/https://www.opensecurityarchitecture.org/frameworks/bog-cisd/controls/https://www.opensecurityarchitecture.org/frameworks/bog-cisd/coverage/https://www.opensecurityarchitecture.org/frameworks/bom-ctrm/https://www.opensecurityarchitecture.org/frameworks/bom-ctrm/controls/https://www.opensecurityarchitecture.org/frameworks/bom-ctrm/coverage/https://www.opensecurityarchitecture.org/frameworks/bot-cyber/https://www.opensecurityarchitecture.org/frameworks/bot-cyber/controls/https://www.opensecurityarchitecture.org/frameworks/bot-cyber/coverage/https://www.opensecurityarchitecture.org/frameworks/bsi-grundschutz/https://www.opensecurityarchitecture.org/frameworks/bsi-grundschutz/controls/https://www.opensecurityarchitecture.org/frameworks/bsi-grundschutz/coverage/https://www.opensecurityarchitecture.org/frameworks/bssc/https://www.opensecurityarchitecture.org/frameworks/bssc/controls/https://www.opensecurityarchitecture.org/frameworks/bssc/coverage/https://www.opensecurityarchitecture.org/frameworks/cbb-tm/https://www.opensecurityarchitecture.org/frameworks/cbb-tm/controls/https://www.opensecurityarchitecture.org/frameworks/cbb-tm/coverage/https://www.opensecurityarchitecture.org/frameworks/cbe-csf/https://www.opensecurityarchitecture.org/frameworks/cbe-csf/controls/https://www.opensecurityarchitecture.org/frameworks/cbe-csf/coverage/https://www.opensecurityarchitecture.org/frameworks/cbest/https://www.opensecurityarchitecture.org/frameworks/cbest/controls/https://www.opensecurityarchitecture.org/frameworks/cbest/coverage/https://www.opensecurityarchitecture.org/frameworks/cbn-csf/https://www.opensecurityarchitecture.org/frameworks/cbn-csf/controls/https://www.opensecurityarchitecture.org/frameworks/cbn-csf/coverage/https://www.opensecurityarchitecture.org/frameworks/cbuae/https://www.opensecurityarchitecture.org/frameworks/cbuae/controls/https://www.opensecurityarchitecture.org/frameworks/cbuae/coverage/https://www.opensecurityarchitecture.org/frameworks/ccss-v9/https://www.opensecurityarchitecture.org/frameworks/ccss-v9/controls/https://www.opensecurityarchitecture.org/frameworks/ccss-v9/coverage/https://www.opensecurityarchitecture.org/frameworks/cis-controls-v8/https://www.opensecurityarchitecture.org/frameworks/cis-controls-v8/controls/https://www.opensecurityarchitecture.org/frameworks/cis-controls-v8/coverage/https://www.opensecurityarchitecture.org/frameworks/cmmc-2/https://www.opensecurityarchitecture.org/frameworks/cmmc-2/controls/https://www.opensecurityarchitecture.org/frameworks/cmmc-2/coverage/https://www.opensecurityarchitecture.org/frameworks/cobit-2019/https://www.opensecurityarchitecture.org/frameworks/cobit-2019/controls/https://www.opensecurityarchitecture.org/frameworks/cobit-2019/coverage/https://www.opensecurityarchitecture.org/frameworks/common-criteria/https://www.opensecurityarchitecture.org/frameworks/common-criteria/controls/https://www.opensecurityarchitecture.org/frameworks/common-criteria/coverage/https://www.opensecurityarchitecture.org/frameworks/cpmi-pfmi/https://www.opensecurityarchitecture.org/frameworks/cpmi-pfmi/controls/https://www.opensecurityarchitecture.org/frameworks/cpmi-pfmi/coverage/https://www.opensecurityarchitecture.org/frameworks/cra/https://www.opensecurityarchitecture.org/frameworks/cra/controls/https://www.opensecurityarchitecture.org/frameworks/cra/coverage/https://www.opensecurityarchitecture.org/frameworks/csa-aicm/https://www.opensecurityarchitecture.org/frameworks/csa-aicm/controls/https://www.opensecurityarchitecture.org/frameworks/csa-aicm/coverage/https://www.opensecurityarchitecture.org/frameworks/csa-ccm-v4/https://www.opensecurityarchitecture.org/frameworks/csa-ccm-v4/controls/https://www.opensecurityarchitecture.org/frameworks/csa-ccm-v4/coverage/https://www.opensecurityarchitecture.org/frameworks/dnb-good-practice/https://www.opensecurityarchitecture.org/frameworks/dnb-good-practice/controls/https://www.opensecurityarchitecture.org/frameworks/dnb-good-practice/coverage/https://www.opensecurityarchitecture.org/frameworks/doe-c2m2/https://www.opensecurityarchitecture.org/frameworks/doe-c2m2/controls/https://www.opensecurityarchitecture.org/frameworks/doe-c2m2/coverage/https://www.opensecurityarchitecture.org/frameworks/dora/https://www.opensecurityarchitecture.org/frameworks/dora/controls/https://www.opensecurityarchitecture.org/frameworks/dora/coverage/https://www.opensecurityarchitecture.org/frameworks/eba-ict/https://www.opensecurityarchitecture.org/frameworks/eba-ict/controls/https://www.opensecurityarchitecture.org/frameworks/eba-ict/coverage/https://www.opensecurityarchitecture.org/frameworks/ecb-croe/https://www.opensecurityarchitecture.org/frameworks/ecb-croe/controls/https://www.opensecurityarchitecture.org/frameworks/ecb-croe/coverage/https://www.opensecurityarchitecture.org/frameworks/fca-sysc-13/https://www.opensecurityarchitecture.org/frameworks/fca-sysc-13/controls/https://www.opensecurityarchitecture.org/frameworks/fca-sysc-13/coverage/https://www.opensecurityarchitecture.org/frameworks/fda-21-cfr-11/https://www.opensecurityarchitecture.org/frameworks/fda-21-cfr-11/controls/https://www.opensecurityarchitecture.org/frameworks/fda-21-cfr-11/coverage/https://www.opensecurityarchitecture.org/frameworks/fda-cyber/https://www.opensecurityarchitecture.org/frameworks/fda-cyber/controls/https://www.opensecurityarchitecture.org/frameworks/fda-cyber/coverage/https://www.opensecurityarchitecture.org/frameworks/ferc-cip/https://www.opensecurityarchitecture.org/frameworks/ferc-cip/controls/https://www.opensecurityarchitecture.org/frameworks/ferc-cip/coverage/https://www.opensecurityarchitecture.org/frameworks/ffiec-is/https://www.opensecurityarchitecture.org/frameworks/ffiec-is/controls/https://www.opensecurityarchitecture.org/frameworks/ffiec-is/coverage/https://www.opensecurityarchitecture.org/frameworks/finma-circular/https://www.opensecurityarchitecture.org/frameworks/finma-circular/controls/https://www.opensecurityarchitecture.org/frameworks/finma-circular/coverage/https://www.opensecurityarchitecture.org/frameworks/finos-ccc/https://www.opensecurityarchitecture.org/frameworks/finos-ccc/controls/https://www.opensecurityarchitecture.org/frameworks/finos-ccc/coverage/https://www.opensecurityarchitecture.org/frameworks/fips-140/https://www.opensecurityarchitecture.org/frameworks/fips-140/controls/https://www.opensecurityarchitecture.org/frameworks/fips-140/coverage/https://www.opensecurityarchitecture.org/frameworks/fisc/https://www.opensecurityarchitecture.org/frameworks/fisc/controls/https://www.opensecurityarchitecture.org/frameworks/fisc/coverage/https://www.opensecurityarchitecture.org/frameworks/gdpr/https://www.opensecurityarchitecture.org/frameworks/gdpr/controls/https://www.opensecurityarchitecture.org/frameworks/gdpr/coverage/https://www.opensecurityarchitecture.org/frameworks/hipaa-sr/https://www.opensecurityarchitecture.org/frameworks/hipaa-sr/controls/https://www.opensecurityarchitecture.org/frameworks/hipaa-sr/coverage/https://www.opensecurityarchitecture.org/frameworks/hitrust-csf/https://www.opensecurityarchitecture.org/frameworks/hitrust-csf/controls/https://www.opensecurityarchitecture.org/frameworks/hitrust-csf/coverage/https://www.opensecurityarchitecture.org/frameworks/hkma-tme1/https://www.opensecurityarchitecture.org/frameworks/hkma-tme1/controls/https://www.opensecurityarchitecture.org/frameworks/hkma-tme1/coverage/https://www.opensecurityarchitecture.org/frameworks/iaea-nss/https://www.opensecurityarchitecture.org/frameworks/iaea-nss/controls/https://www.opensecurityarchitecture.org/frameworks/iaea-nss/coverage/https://www.opensecurityarchitecture.org/frameworks/iec-62443/https://www.opensecurityarchitecture.org/frameworks/iec-62443/controls/https://www.opensecurityarchitecture.org/frameworks/iec-62443/coverage/https://www.opensecurityarchitecture.org/frameworks/ieee-1686/https://www.opensecurityarchitecture.org/frameworks/ieee-1686/controls/https://www.opensecurityarchitecture.org/frameworks/ieee-1686/coverage/https://www.opensecurityarchitecture.org/frameworks/iosco-cyber/https://www.opensecurityarchitecture.org/frameworks/iosco-cyber/controls/https://www.opensecurityarchitecture.org/frameworks/iosco-cyber/coverage/https://www.opensecurityarchitecture.org/frameworks/isae-3402/https://www.opensecurityarchitecture.org/frameworks/isae-3402/controls/https://www.opensecurityarchitecture.org/frameworks/isae-3402/coverage/https://www.opensecurityarchitecture.org/frameworks/iso-27001-2022/https://www.opensecurityarchitecture.org/frameworks/iso-27001-2022/controls/https://www.opensecurityarchitecture.org/frameworks/iso-27001-2022/coverage/https://www.opensecurityarchitecture.org/frameworks/iso-27002-2022/https://www.opensecurityarchitecture.org/frameworks/iso-27002-2022/controls/https://www.opensecurityarchitecture.org/frameworks/iso-27002-2022/coverage/https://www.opensecurityarchitecture.org/frameworks/iso-27799/https://www.opensecurityarchitecture.org/frameworks/iso-27799/controls/https://www.opensecurityarchitecture.org/frameworks/iso-27799/coverage/https://www.opensecurityarchitecture.org/frameworks/iso-42001-2023/https://www.opensecurityarchitecture.org/frameworks/iso-42001-2023/controls/https://www.opensecurityarchitecture.org/frameworks/iso-42001-2023/coverage/https://www.opensecurityarchitecture.org/frameworks/lgpd-bcb/https://www.opensecurityarchitecture.org/frameworks/lgpd-bcb/controls/https://www.opensecurityarchitecture.org/frameworks/lgpd-bcb/coverage/https://www.opensecurityarchitecture.org/frameworks/lloyds-ms/https://www.opensecurityarchitecture.org/frameworks/lloyds-ms/controls/https://www.opensecurityarchitecture.org/frameworks/lloyds-ms/coverage/https://www.opensecurityarchitecture.org/frameworks/mas-trm/https://www.opensecurityarchitecture.org/frameworks/mas-trm/controls/https://www.opensecurityarchitecture.org/frameworks/mas-trm/coverage/https://www.opensecurityarchitecture.org/frameworks/mica/https://www.opensecurityarchitecture.org/frameworks/mica/controls/https://www.opensecurityarchitecture.org/frameworks/mica/coverage/https://www.opensecurityarchitecture.org/frameworks/mlps-2/https://www.opensecurityarchitecture.org/frameworks/mlps-2/controls/https://www.opensecurityarchitecture.org/frameworks/mlps-2/coverage/https://www.opensecurityarchitecture.org/frameworks/naic-ds/https://www.opensecurityarchitecture.org/frameworks/naic-ds/controls/https://www.opensecurityarchitecture.org/frameworks/naic-ds/coverage/https://www.opensecurityarchitecture.org/frameworks/nca-ecc/https://www.opensecurityarchitecture.org/frameworks/nca-ecc/controls/https://www.opensecurityarchitecture.org/frameworks/nca-ecc/coverage/https://www.opensecurityarchitecture.org/frameworks/nerc-cip/https://www.opensecurityarchitecture.org/frameworks/nerc-cip/controls/https://www.opensecurityarchitecture.org/frameworks/nerc-cip/coverage/https://www.opensecurityarchitecture.org/frameworks/nhs-dspt/https://www.opensecurityarchitecture.org/frameworks/nhs-dspt/controls/https://www.opensecurityarchitecture.org/frameworks/nhs-dspt/coverage/https://www.opensecurityarchitecture.org/frameworks/nis2/https://www.opensecurityarchitecture.org/frameworks/nis2/controls/https://www.opensecurityarchitecture.org/frameworks/nis2/coverage/https://www.opensecurityarchitecture.org/frameworks/nist-csf-2/https://www.opensecurityarchitecture.org/frameworks/nist-csf-2/controls/https://www.opensecurityarchitecture.org/frameworks/nist-csf-2/coverage/https://www.opensecurityarchitecture.org/frameworks/nrc-73-54/https://www.opensecurityarchitecture.org/frameworks/nrc-73-54/controls/https://www.opensecurityarchitecture.org/frameworks/nrc-73-54/coverage/https://www.opensecurityarchitecture.org/frameworks/nydfs-500/https://www.opensecurityarchitecture.org/frameworks/nydfs-500/controls/https://www.opensecurityarchitecture.org/frameworks/nydfs-500/coverage/https://www.opensecurityarchitecture.org/frameworks/osfi-b13/https://www.opensecurityarchitecture.org/frameworks/osfi-b13/controls/https://www.opensecurityarchitecture.org/frameworks/osfi-b13/coverage/https://www.opensecurityarchitecture.org/frameworks/owasp-masvs-v2/https://www.opensecurityarchitecture.org/frameworks/owasp-masvs-v2/controls/https://www.opensecurityarchitecture.org/frameworks/owasp-masvs-v2/coverage/https://www.opensecurityarchitecture.org/frameworks/pci-dss-v4/https://www.opensecurityarchitecture.org/frameworks/pci-dss-v4/controls/https://www.opensecurityarchitecture.org/frameworks/pci-dss-v4/coverage/https://www.opensecurityarchitecture.org/frameworks/pci-hsm/https://www.opensecurityarchitecture.org/frameworks/pci-hsm/controls/https://www.opensecurityarchitecture.org/frameworks/pci-hsm/coverage/https://www.opensecurityarchitecture.org/frameworks/pci-pts/https://www.opensecurityarchitecture.org/frameworks/pci-pts/controls/https://www.opensecurityarchitecture.org/frameworks/pci-pts/coverage/https://www.opensecurityarchitecture.org/frameworks/popia/https://www.opensecurityarchitecture.org/frameworks/popia/controls/https://www.opensecurityarchitecture.org/frameworks/popia/coverage/https://www.opensecurityarchitecture.org/frameworks/pra-op-resilience/https://www.opensecurityarchitecture.org/frameworks/pra-op-resilience/controls/https://www.opensecurityarchitecture.org/frameworks/pra-op-resilience/coverage/https://www.opensecurityarchitecture.org/frameworks/pra-ss1-23/https://www.opensecurityarchitecture.org/frameworks/pra-ss1-23/controls/https://www.opensecurityarchitecture.org/frameworks/pra-ss1-23/coverage/https://www.opensecurityarchitecture.org/frameworks/qatar-nia/https://www.opensecurityarchitecture.org/frameworks/qatar-nia/controls/https://www.opensecurityarchitecture.org/frameworks/qatar-nia/coverage/https://www.opensecurityarchitecture.org/frameworks/rbi-csf/https://www.opensecurityarchitecture.org/frameworks/rbi-csf/controls/https://www.opensecurityarchitecture.org/frameworks/rbi-csf/coverage/https://www.opensecurityarchitecture.org/frameworks/sa-js2/https://www.opensecurityarchitecture.org/frameworks/sa-js2/controls/https://www.opensecurityarchitecture.org/frameworks/sa-js2/coverage/https://www.opensecurityarchitecture.org/frameworks/sama-csf/https://www.opensecurityarchitecture.org/frameworks/sama-csf/controls/https://www.opensecurityarchitecture.org/frameworks/sama-csf/coverage/https://www.opensecurityarchitecture.org/frameworks/sebi-cscrf/https://www.opensecurityarchitecture.org/frameworks/sebi-cscrf/controls/https://www.opensecurityarchitecture.org/frameworks/sebi-cscrf/coverage/https://www.opensecurityarchitecture.org/frameworks/sec-custody-digital/https://www.opensecurityarchitecture.org/frameworks/sec-custody-digital/controls/https://www.opensecurityarchitecture.org/frameworks/sec-custody-digital/coverage/https://www.opensecurityarchitecture.org/frameworks/soc2-tsc/https://www.opensecurityarchitecture.org/frameworks/soc2-tsc/controls/https://www.opensecurityarchitecture.org/frameworks/soc2-tsc/coverage/https://www.opensecurityarchitecture.org/frameworks/solvency-ii/https://www.opensecurityarchitecture.org/frameworks/solvency-ii/controls/https://www.opensecurityarchitecture.org/frameworks/solvency-ii/coverage/https://www.opensecurityarchitecture.org/frameworks/swift-cscf/https://www.opensecurityarchitecture.org/frameworks/swift-cscf/controls/https://www.opensecurityarchitecture.org/frameworks/swift-cscf/coverage/https://www.opensecurityarchitecture.org/frameworks/tiber-eu/https://www.opensecurityarchitecture.org/frameworks/tiber-eu/controls/https://www.opensecurityarchitecture.org/frameworks/tiber-eu/coverage/https://www.opensecurityarchitecture.org/frameworks/tsa-psd/https://www.opensecurityarchitecture.org/frameworks/tsa-psd/controls/https://www.opensecurityarchitecture.org/frameworks/tsa-psd/coverage/https://www.opensecurityarchitecture.org/frameworks/uae-ia/https://www.opensecurityarchitecture.org/frameworks/uae-ia/controls/https://www.opensecurityarchitecture.org/frameworks/uae-ia/coverage/https://www.opensecurityarchitecture.org/patterns/https://www.opensecurityarchitecture.org/patterns/sp-000/https://www.opensecurityarchitecture.org/patterns/sp-001/https://www.opensecurityarchitecture.org/patterns/sp-002/https://www.opensecurityarchitecture.org/patterns/sp-003/https://www.opensecurityarchitecture.org/patterns/sp-004/https://www.opensecurityarchitecture.org/patterns/sp-005/https://www.opensecurityarchitecture.org/patterns/sp-006/https://www.opensecurityarchitecture.org/patterns/sp-007/https://www.opensecurityarchitecture.org/patterns/sp-008/https://www.opensecurityarchitecture.org/patterns/sp-009/https://www.opensecurityarchitecture.org/patterns/sp-010/https://www.opensecurityarchitecture.org/patterns/sp-011/https://www.opensecurityarchitecture.org/patterns/sp-012/https://www.opensecurityarchitecture.org/patterns/sp-013/https://www.opensecurityarchitecture.org/patterns/sp-014/https://www.opensecurityarchitecture.org/patterns/sp-015/https://www.opensecurityarchitecture.org/patterns/sp-016/https://www.opensecurityarchitecture.org/patterns/sp-017/https://www.opensecurityarchitecture.org/patterns/sp-018/https://www.opensecurityarchitecture.org/patterns/sp-019/https://www.opensecurityarchitecture.org/patterns/sp-020/https://www.opensecurityarchitecture.org/patterns/sp-021/https://www.opensecurityarchitecture.org/patterns/sp-022/https://www.opensecurityarchitecture.org/patterns/sp-023/https://www.opensecurityarchitecture.org/patterns/sp-024/https://www.opensecurityarchitecture.org/patterns/sp-025/https://www.opensecurityarchitecture.org/patterns/sp-026/https://www.opensecurityarchitecture.org/patterns/sp-027/https://www.opensecurityarchitecture.org/patterns/sp-028/https://www.opensecurityarchitecture.org/patterns/sp-029/https://www.opensecurityarchitecture.org/patterns/sp-030/https://www.opensecurityarchitecture.org/patterns/sp-031/https://www.opensecurityarchitecture.org/patterns/sp-032/https://www.opensecurityarchitecture.org/patterns/sp-033/https://www.opensecurityarchitecture.org/patterns/sp-034/https://www.opensecurityarchitecture.org/patterns/sp-035/https://www.opensecurityarchitecture.org/patterns/sp-036/https://www.opensecurityarchitecture.org/patterns/sp-037/https://www.opensecurityarchitecture.org/patterns/sp-038/https://www.opensecurityarchitecture.org/patterns/sp-039/https://www.opensecurityarchitecture.org/patterns/sp-040/https://www.opensecurityarchitecture.org/patterns/sp-041/https://www.opensecurityarchitecture.org/patterns/sp-042/https://www.opensecurityarchitecture.org/patterns/sp-043/https://www.opensecurityarchitecture.org/patterns/sp-044/https://www.opensecurityarchitecture.org/patterns/sp-045/https://www.opensecurityarchitecture.org/patterns/sp-046/https://www.opensecurityarchitecture.org/patterns/sp-047/https://www.opensecurityarchitecture.org/patterns/sp-048/https://www.opensecurityarchitecture.org/patterns/sp-049/https://www.opensecurityarchitecture.org/patterns/sp-050/https://www.opensecurityarchitecture.org/patterns/sp-051/https://www.opensecurityarchitecture.org/patterns/sp-052/https://www.opensecurityarchitecture.org/patterns/sp-053/https://www.opensecurityarchitecture.org/patterns/sp-054/