architecting-security
Architecting Security guides strategic security design through defense-in-depth layering, zero trust implementation, and structured threat modeling. Map controls to NIST CSF, CIS Controls, and ISO 27001 for governance and compliance across greenfield systems, cloud migrations, and enterprise audits.
Architecting Security helps you design comprehensive security architectures using defense-in-depth and zero trust principles.
AI-generated summary based on this skill's SKILL.md
Decision gist · record as of 2025-12-11
Architecting Security helps you design comprehensive security architectures using defense-in-depth and zero trust principles. Architecting Security guides strategic security design through defense-in-depth layering, zero trust implementation, and structured threat modeling. Map controls to NIST CSF, CIS Controls, and ISO 27001 for governance and compliance across greenfield systems, cloud migrations, and enterprise audits.
Use it when
- Architecting Security covers zero trust architecture implementation by teaching you to eliminate implicit trust.
- Architecting Security helps you align your security program with major compliance frameworks.
Verify before relying
Read SKILL.md below before installing (22 files). Open directory: indexed for reading, not audited.
Install
ancoleman/ai-design-components/architecting-security · repository language: Python
Open directory. Skills are indexed for reading, not audited. Review a skill's body before installing it.
Frequently asked questions
AI-generated answers based on this skill's SKILL.md and metadata
How does Architecting Security help design security architecture for new systems?
Architecting Security guides you through defense-in-depth layering and zero trust principles to build comprehensive security architectures from the ground up. The skill helps you structure security controls across multiple layers, establish trust boundaries, and implement strategic defenses that protect systems throughout their lifecycle.
What is zero trust architecture and how do I implement it?
Architecting Security covers zero trust architecture implementation by teaching you to eliminate implicit trust, verify every access request, and enforce least-privilege principles. The skill guides you through designing networks, identity systems, and access controls that assume breach and require continuous verification regardless of user location or device.
How can I map security controls to NIST, CIS, and ISO 27001?
Architecting Security helps you align your security program with major compliance frameworks. The skill teaches you to map your implemented controls to NIST Cybersecurity Framework, CIS Controls v8, and ISO 27001 requirements, enabling you to demonstrate compliance, track coverage gaps, and build governance programs that satisfy regulatory obligations.
What threat modeling approaches does Architecting Security cover?
Architecting Security teaches structured threat modeling methodologies including STRIDE for identifying threats across systems and applications. The skill guides you through risk assessment, threat identification, and control design to systematically address vulnerabilities before they reach production.
How do I implement cloud security architecture on AWS, GCP, or Azure?
Architecting Security provides cloud security architecture guidance across AWS, GCP, and Azure platforms. The skill covers cloud-native security posture management, landing zone design, identity and access patterns, and defense-in-depth controls tailored to each cloud provider's services and security models.
What does Architecting Security include for security governance?
Architecting Security helps establish security governance and compliance programs by teaching you to structure policies, define roles and responsibilities, implement controls, and create audit mechanisms. The skill guides you through building programs that align with frameworks like NIST CSF and CIS Controls while meeting organizational risk requirements.
SKILL.md
Rendered from the published skill. Quoted content, verbatim.
Security Architecture
Design and implement comprehensive security architectures that protect systems, data, and users through layered defense strategies, zero trust principles, and risk-based security controls.
Purpose
Security architecture provides the strategic foundation for building resilient, compliant, and trustworthy systems. This skill guides the design of defense-in-depth layers, zero trust implementations, threat modeling methodologies, and mapping to control frameworks (NIST CSF, CIS Controls, ISO 27001).
Unlike tactical security skills (configuring firewalls, implementing authentication, scanning vulnerabilities), security architecture focuses on strategic planning, comprehensive defense strategies, and governance frameworks.
When to Use This Skill
Use security architecture when:
- Designing security
(truncated - see the full file via the links below)
File tree — 15 files
skills/architecting-security/SKILL.md
skills/architecting-security/examples/architectures/aws-multi-account-security.md
skills/architecting-security/examples/architectures/azure-landing-zone.md
skills/architecting-security/examples/architectures/gcp-security-hierarchy.md
skills/architecting-security/examples/architectures/zero-trust-network.md
skills/architecting-security/examples/threat-models/api-threat-model.md
skills/architecting-security/examples/threat-models/microservices-threat-model.md
skills/architecting-security/examples/threat-models/web-app-stride.md
skills/architecting-security/outputs.yaml
skills/architecting-security/references/aws-security-architecture.md
skills/architecting-security/references/azure-security-architecture.md
skills/architecting-security/references/cis-controls.md
skills/architecting-security/references/defense-in-depth.md
skills/architecting-security/references/gcp-security-architecture.md
skills/architecting-security/references/iam-patterns.md
Let your AI agent find skills like this
Example. Real query, live index.
You found this page by searching. An agent finds it by wishing: SkillFed indexes 56,283 agent skills by what they can do, searchable in plain language.
wish › “Design comprehensive security architecture using defense-in-depth and zero trust”
Give your agent the search over MCP, or paste the wish link into any chat. No install? Search from any chat →
Related skills
Appsec Expert provides specialized guidance for securing applications throughout the development lifecycle. It covers threat modeling with STRIDE, vulnerability testing via SAST/DAST/SCA tools, secure coding patterns, and DevSecOps automation. Use it to identify vulnerabilities, design defense-in-depth controls, and remediate security issues with verified, production-ready approaches.
Systematically explores your codebase to identify shallow modules and coupling friction, then frames the problem space and generates multiple interface design proposals via parallel sub-agents. Compares alternatives and files the recommended refactor as a GitHub issue RFC, grounding each suggestion in actual call patterns and dependency boundaries.
This skill guides you through building Spring Boot applications with clean architecture principles, ensuring domain logic stays independent of frameworks and infrastructure. Learn to structure layered packages, implement ports and adapters, apply domain-driven design tactical patterns, and maintain strict dependency rules that keep your codebase testable and maintainable.
Architecture guides you through designing complete system architectures—from monolithic and microservices to event-driven and serverless approaches. It covers design patterns, quality attributes like performance and security, technology selection, and provides frameworks for documenting architectural decisions. Use it to evaluate trade-offs, plan scalability, and ensure your systems are maintainable and resilient.
Master continuous integration and deployment by building robust pipelines across multiple platforms. This skill guides you through setting up automated workflows that handle testing, building, and deploying your applications with minimal manual intervention.
This skill guides architects through building cloud-native microservices systems from the ground up. It covers domain-driven service decomposition, communication pattern selection, data ownership strategies, resilience implementation, and observability setup—with concrete code examples for correlation IDs, circuit breakers, sagas, and Kubernetes probes.
More skills architecture-patterns (Apache-2.0) · architecture-designer (MIT)