Architecture / Security Architecture Operating Models / Source notes
Source and provenance
Workbook notes and change history
Scope, authorship and recorded changes, separated from the educational narrative.
Workbook source · Version Control
Version control
Administrative provenance and the v2.0 correction record.
Architecture Roles and Responsibilities
| Author | Rob Campbell | |
|---|---|---|
| Version | Date | Change Description |
| 1.1000000000000001 | 9 November 2025 | Added SABSA alignment to Service Catalogue |
| 2 | 25 September 2026 | Security Architecture edition: focused on the Enterprise Security, Security Solutions and Operational Security Architect roles; EA/SA/OA roles removed; SFIA 9 corrections applied; catalogues given IDs, Through Life phases and ODM families; SSA/OSA services mapped into the ODM framework. |
v2.0 Change Log
| Area | Change | Rationale / Notes |
|---|---|---|
| Scope | Removed tabs: EA, SA and OA role sheets. Security catalogues, Consult ESA Service Catalogue, Consult Services Desc and Tech Security Domains retained unchanged. | Workbook now focuses on the three security architecture roles. |
| SFIA 9 | EA/SA/OA rows replaced by ESA, SSA and OSA; Level Notes column added. Level descriptors corrected (Level 5 = Ensure, advise; Level 6 = Initiate, influence). Codes corrected: ARCH = Solution architecture, STPL = Enterprise and business architecture, RLMT = Stakeholder relationship management, SCAD = Security operations. Non-SFIA-9 codes replaced: IRMG/INRM/REMG → BURM; PROF ("Professionalism") → GOVN/INAS/SCAD by role; INAN → USUP; EDUC/TRMG → ETDL; SECU → SCAD; MONI/OBAS → ITOP; VULN → VUAS; ASMG ("Assurance") → INAS; RESC ("Resilience") → COPL; TEST (security testing) → NFTS; COMP → AUDT; PCOO → PEDP; RLMT ("Real-time Monitoring") → USUP. Reference table rebuilt with SFIA 9 definitions and defined levels. | Validated against sfia-online.org (SFIA 9). Applied in place, including every ESA, SSA and OSA role-sheet row. |
| Through Life | Enterprise, Solutions and Operational Architect columns removed from all three layer tables; security role columns retained unchanged. EA/SA/OA role diagram removed; ESA/SSA/OSA role diagram retained. | Core value-stream content unchanged. |
| ESA / SSA / OSA role sheets | Activity, description and artefact content unchanged. ESA sheet given its missing title; stray double spaces removed. | |
| Service Catalogues | Service IDs (ESA-nn / SSA-nn / OSA-nn), Primary Through Life Phases and ODM Family columns added to all three catalogues; ESA catalogue given a scope/consumer line; the stray note in ESA G12 moved to a Notes column. | Aligns the three catalogues and lets every role's services roll up to the ODMs. |
| ODM framework | Metric set, PLAs, indicators, lineage, dashboard and roadmaps unchanged. Family Map now lists ESA, SSA and OSA services per family; Register "Catalogue Services" uses ESA-nn IDs and adds the directly contributing SSA/OSA services; Overview wording updated to match. | Enhancement only - no targets or definitions changed. |
About illustrative data
Workbook targets and dashboard values are illustrative pending PLA negotiation. Establish lineage and coverage before treating a measure as PLA-grade.