Guidance
Domain Name Guidance
A practical guide to domain names, ownership, renewal management, and the risks created by poor domain administration.
Read guidanceAssured Control
Security architecture guidance, publications, and working diagrams.
Assured Control is a portfolio of practical architecture work: published thinking, reusable models, downloadable diagrams, and advice shaped by real delivery and operating experience.
Content
Real working artefacts rather than placeholder marketing copy
Focus
Advice, models, and publications that can be reused in practice
Use
Reference material for architects, programme teams, and operators
What’s inside
01
Downloadable matrices, ontologies, posters, and supporting diagrams
02
Practical guidance on domains, certificates, security operations, and policy
03
Published articles, long-form papers, and book contributions
20+
downloadable frameworks and diagrams
16
core pages and specialist topics
2005
origin of the Controls Matrix work
What This Site Is For
A working library of security architecture material that people can actually use.
The priority here is not the shell of the site. It is the body of work: the controls matrix, the risk ontology, frameworks, posters, architecture writing, and practical guidance that supports real programmes and decisions.
A resource for practical security architecture with guidance, examples, and templates designed to make security work more effective in the real world.
What You Can Find
- Diagram-heavy resources with direct downloads in PDF, SVG, Graffle, Visio, JPG, and ZIP formats.
- Advice pages covering certificate management, policy, domain governance, and security operations.
- Publications that connect strategy, architecture, governance, and cloud design to practical delivery.
Guidance
Advice that supports live decisions.
Guidance
Certificate Management
Guidance for managing digital certificates across internal and external environments, with an emphasis on lifecycle discipline and operational reliability.
Read guidanceGuidance
Certificate Policy Framework
A governance-oriented framework for certificate lifecycle controls, technical standards, compliance alignment, and continuous assurance.
Read guidanceGuidance
Security Operations
A strategic view of when and how to implement or transition to a new SOC or MDR provider.
Read guidanceFeatured Resources
Frameworks and diagrams that carry the work.
matrix
ResourceSecurity Controls Matrix
The long-running Assured Control matrix that organizes security domains, controls, and business drivers into a usable working taxonomy.
5 downloads
Explore resource
ontology
ResourceRisk Ontology
A structured way to define threats, vulnerabilities, controls, metrics, and their relationships in a business-led risk model.
5 downloads
Explore resourcedownload bundle
ResourceModels and Frameworks
A curated library of ontologies, frameworks, presentations, and supporting diagram bundles from the original Models and Other Madness section.
12 downloads
Explore resourcePopular Downloads
Preview the diagrams, then open the originals.
Download
Security Controls Matrix
Large-format PDF of the Assured Control matrix.
Open file
Download
Risk Ontology
Scalable PDF version of the risk ontology.
Open file
Download
Cloud Architecture Posters
Supporting diagram bundle for the business-driven cloud architecture material.
Open file
Publications
Published work and longer-form thinking.
Assured Control
Modern Security Architecture
A long-form paper on how security architecture has evolved across enterprise strategy, solution delivery, and live operations.
Assured Control
Modern Security Architecture
A long-form paper on how security architecture has evolved across enterprise strategy, solution delivery, and live operations.
Medium
Strategic Cloud Architecture Publications
A curated publication entry for the business-driven cloud architecture writing and its related presentation material.
Medium
Strategic Cloud Architecture Publications
A curated publication entry for the business-driven cloud architecture writing and its related presentation material.
Taylor & Francis
Governance, Risk and Compliance Contribution
A publication entry covering the book contribution on the role of enterprise security architecture in the GRC landscape.
Taylor & Francis
Governance, Risk and Compliance Contribution
A publication entry covering the book contribution on the role of enterprise security architecture in the GRC landscape.