Describes the structure, components and topology (connections and layout) of security controls within the IT infrastructure of an enterprise. Scope Notes: The security architecture shows how defense-in-depth is implemented and how layers of control are linked, and is essential to designing and implementing security controls in any complex environment.

ISACA is an international professional association focused on IT governance. It is known as the Information Systems Audit and Control.