Architecture / Security Architecture Operating Models / Source notes

Source and provenance

Workbook notes and change history

Scope, authorship and recorded changes, separated from the educational narrative.

Workbook source · Version Control

Version control

Administrative provenance and the v2.0 correction record.

Download source

Architecture Roles and Responsibilities

AuthorRob Campbell
VersionDateChange Description
1.10000000000000019 November 2025Added SABSA alignment to Service Catalogue
225 September 2026Security Architecture edition: focused on the Enterprise Security, Security Solutions and Operational Security Architect roles; EA/SA/OA roles removed; SFIA 9 corrections applied; catalogues given IDs, Through Life phases and ODM families; SSA/OSA services mapped into the ODM framework.

v2.0 Change Log

AreaChangeRationale / Notes
ScopeRemoved tabs: EA, SA and OA role sheets. Security catalogues, Consult ESA Service Catalogue, Consult Services Desc and Tech Security Domains retained unchanged.Workbook now focuses on the three security architecture roles.
SFIA 9EA/SA/OA rows replaced by ESA, SSA and OSA; Level Notes column added. Level descriptors corrected (Level 5 = Ensure, advise; Level 6 = Initiate, influence). Codes corrected: ARCH = Solution architecture, STPL = Enterprise and business architecture, RLMT = Stakeholder relationship management, SCAD = Security operations. Non-SFIA-9 codes replaced: IRMG/INRM/REMG → BURM; PROF ("Professionalism") → GOVN/INAS/SCAD by role; INAN → USUP; EDUC/TRMG → ETDL; SECU → SCAD; MONI/OBAS → ITOP; VULN → VUAS; ASMG ("Assurance") → INAS; RESC ("Resilience") → COPL; TEST (security testing) → NFTS; COMP → AUDT; PCOO → PEDP; RLMT ("Real-time Monitoring") → USUP. Reference table rebuilt with SFIA 9 definitions and defined levels.Validated against sfia-online.org (SFIA 9). Applied in place, including every ESA, SSA and OSA role-sheet row.
Through LifeEnterprise, Solutions and Operational Architect columns removed from all three layer tables; security role columns retained unchanged. EA/SA/OA role diagram removed; ESA/SSA/OSA role diagram retained.Core value-stream content unchanged.
ESA / SSA / OSA role sheetsActivity, description and artefact content unchanged. ESA sheet given its missing title; stray double spaces removed.
Service CataloguesService IDs (ESA-nn / SSA-nn / OSA-nn), Primary Through Life Phases and ODM Family columns added to all three catalogues; ESA catalogue given a scope/consumer line; the stray note in ESA G12 moved to a Notes column.Aligns the three catalogues and lets every role's services roll up to the ODMs.
ODM frameworkMetric set, PLAs, indicators, lineage, dashboard and roadmaps unchanged. Family Map now lists ESA, SSA and OSA services per family; Register "Catalogue Services" uses ESA-nn IDs and adds the directly contributing SSA/OSA services; Overview wording updated to match.Enhancement only - no targets or definitions changed.

About illustrative data

Workbook targets and dashboard values are illustrative pending PLA negotiation. Establish lineage and coverage before treating a measure as PLA-grade.