About
A small, independent reference for people who review and design system security.
What this site is
IT Security Architect publishes free working tools (an architecture review builder, a STRIDE worksheet and a control crosswalk) and a small set of guides that explain them. The aim is narrow: help an architect go from a design to findings that trace to the NIST control catalogs their organization reports against.
Who runs it
The site is published by IT Security Architect, an independent publisher. Content is written and maintained as organizational work; individual guides do not carry personal bylines. We are not affiliated with NIST, CISA, ISC2, CompTIA, Microsoft, AWS or any other organization whose work we cite.
How the content is made
- Official data, reproduced unchanged. Control titles, statements, baselines and crosswalks come from NIST's machine-readable releases and its CSF 2.0 Reference Tool, processed by a script that fails the build if a referenced control does not exist or is withdrawn.
- Editorial judgment, labeled. Review questions, STRIDE prompts and their control associations are ours. Every tool and guide says so where it applies.
- Sources checked, not just cited. Each guide lists its references with the date we checked them and whether we read the full text, a page, or a dataset. See the editorial policy.
What we do not claim
We do not run hands-on product tests, and there is no staffed editorial board or external expert review. Our material is not legal, compliance or assessment advice, and using our tools does not show that any system meets a requirement. Treat it as a structured starting point for your own professional judgment.
Money
The site currently earns nothing: no ads, no affiliate links, no sponsored content. If that changes, the relevant pages will say so clearly, and we will never accept sponsored placements.
Contact
Corrections, suggestions and questions: info@itsecurityarchitect.com.