01
Identify identities, assets and trust transitions
Apply this point to a real Platform Engineering Academy design, delivery or operational scenario and record the evidence used to validate the outcome.
Platform Engineering Academy · Interactive Architecture Studio
Security Boundary Model
Visualise identity, network, workload and data boundaries with their enforcement points.
Objective: Make trust assumptions and security controls visible and testable.
Practical guidance
Plan and design
02
Classify privileged and non-privileged paths
Apply this point to a real Platform Engineering Academy design, delivery or operational scenario and record the evidence used to validate the outcome.
03
Map preventive, detective and recovery controls
Apply this point to a real Platform Engineering Academy design, delivery or operational scenario and record the evidence used to validate the outcome.
Practical guidance
Build and validate
01
Model attack paths and compensating controls
Apply this point to a real Platform Engineering Academy design, delivery or operational scenario and record the evidence used to validate the outcome.
02
Validate secrets, keys and certificate handling
Apply this point to a real Platform Engineering Academy design, delivery or operational scenario and record the evidence used to validate the outcome.
03
Review least privilege and separation of duties
Apply this point to a real Platform Engineering Academy design, delivery or operational scenario and record the evidence used to validate the outcome.
Practical guidance
Evidence and review
01
Document residual risk
Apply this point to a real Platform Engineering Academy design, delivery or operational scenario and record the evidence used to validate the outcome.
02
Link controls to evidence
Apply this point to a real Platform Engineering Academy design, delivery or operational scenario and record the evidence used to validate the outcome.
03
Schedule control-owner reviews
Apply this point to a real Platform Engineering Academy design, delivery or operational scenario and record the evidence used to validate the outcome.