CSARCH

Cyber Security Architecture. Security as construction, not as a shopping list of products. The field has no shortage of building blocks — firewalls, proxies, IDS/IPS, VPNs, WAFs, scanners, IAM — and cyber security architecture is the discipline that decides which of them, wired together how, with which processes, for a given stretch of a cyber system. "Cyber system" is deliberately wide here: office IT, industrial OT, mass-deployed IoT and cloud services all count, and most real estates are a grown mixture of all four.

The module works outwards from that definition: who the stakeholders are and why an architecture lives or dies on their acceptance; a Basic Cyber Security Model for judging any design (only good actors, doing good actions, in a desired environment); the historical eras whose remains are still in every estate — security-by-obscurity, perimeter, AAA/IAM, security-on-the-system, macro-perimeter and micro-perimeter/zero trust; then the architecture models proper (isolation, DMZ patterns, gateways, air-gap, bastion hosts) and the hard application fields: cloud, DEV, application architecture and OT.