architecting-security
Architecting Security guides strategic security design through defense-in-depth layering, zero trust implementation, and structured threat modeling. Map controls to NIST CSF, CIS Controls, and ISO 27001 for governance and compliance across greenfield systems, cloud migrations, and enterprise audits.
Architecting Security helps you design comprehensive security architectures using defense-in-depth and zero trust principles.
AI-generated summary based on this skill's SKILL.md
Install
ancoleman/ai-design-components/architecting-security · repository language: Python
git clone https://github.com/ancoleman/ai-design-components
cp -r ai-design-components/skills/architecting-security ~/.claude/skills/architecting-securityFrequently asked questions
AI-generated answers based on this skill's SKILL.md and metadata
How does Architecting Security help design security architecture for new systems?
Architecting Security guides you through defense-in-depth layering and zero trust principles to build comprehensive security architectures from the ground up. The skill helps you structure security controls across multiple layers, establish trust boundaries, and implement strategic defenses that protect systems throughout their lifecycle.
What is zero trust architecture and how do I implement it?
Architecting Security covers zero trust architecture implementation by teaching you to eliminate implicit trust, verify every access request, and enforce least-privilege principles. The skill guides you through designing networks, identity systems, and access controls that assume breach and require continuous verification regardless of user location or device.
How can I map security controls to NIST, CIS, and ISO 27001?
Architecting Security helps you align your security program with major compliance frameworks. The skill teaches you to map your implemented controls to NIST Cybersecurity Framework, CIS Controls v8, and ISO 27001 requirements, enabling you to demonstrate compliance, track coverage gaps, and build governance programs that satisfy regulatory obligations.
What threat modeling approaches does Architecting Security cover?
Architecting Security teaches structured threat modeling methodologies including STRIDE for identifying threats across systems and applications. The skill guides you through risk assessment, threat identification, and control design to systematically address vulnerabilities before they reach production.
How do I implement cloud security architecture on AWS, GCP, or Azure?
Architecting Security provides cloud security architecture guidance across AWS, GCP, and Azure platforms. The skill covers cloud-native security posture management, landing zone design, identity and access patterns, and defense-in-depth controls tailored to each cloud provider's services and security models.
What does Architecting Security include for security governance?
Architecting Security helps establish security governance and compliance programs by teaching you to structure policies, define roles and responsibilities, implement controls, and create audit mechanisms. The skill guides you through building programs that align with frameworks like NIST CSF and CIS Controls while meeting organizational risk requirements.
SKILL.md
rendered from the published skill — quoted content, verbatim
Security Architecture
Design and implement comprehensive security architectures that protect systems, data, and users through layered defense strategies, zero trust principles, and risk-based security controls.
Purpose
Security architecture provides the strategic foundation for building resilient, compliant, and trustworthy systems. This skill guides the design of defense-in-depth layers, zero trust implementations, threat modeling methodologies, and mapping to control frameworks (NIST CSF, CIS Controls, ISO 27001).
Unlike tactical security skills (configuring firewalls, implementing authentication, scanning vulnerabilities), security architecture focuses on strategic planning, comprehensive defense strategies, and governance frameworks.
When to Use This Skill
Use security architecture when:
- Designing security
(truncated - see the full file via the links below)
Read as markdown · JSON record · Browse the source repository
File tree — 15 files
skills/architecting-security/SKILL.md
skills/architecting-security/examples/architectures/aws-multi-account-security.md
skills/architecting-security/examples/architectures/azure-landing-zone.md
skills/architecting-security/examples/architectures/gcp-security-hierarchy.md
skills/architecting-security/examples/architectures/zero-trust-network.md
skills/architecting-security/examples/threat-models/api-threat-model.md
skills/architecting-security/examples/threat-models/microservices-threat-model.md
skills/architecting-security/examples/threat-models/web-app-stride.md
skills/architecting-security/outputs.yaml
skills/architecting-security/references/aws-security-architecture.md
skills/architecting-security/references/azure-security-architecture.md
skills/architecting-security/references/cis-controls.md
skills/architecting-security/references/defense-in-depth.md
skills/architecting-security/references/gcp-security-architecture.md
skills/architecting-security/references/iam-patterns.md