IT Security Architect: guidesFree working tools for security architects: a scoped architecture review checklist and a STRIDE worksheet, each traced to NIST SP 800-53, CSF 2.0 and SP 800-171 from official NIST data.https://itsecurityarchitect.com/en-usThe CSF 2.0 to SP 800-53 mapping, and how to use it in designhttps://itsecurityarchitect.com/guides/csf-2-to-800-53-mapping/https://itsecurityarchitect.com/guides/csf-2-to-800-53-mapping/What NIST's official CSF 2.0 to SP 800-53 Rev. 5.2.0 informative references contain, measured from the CPRT export, and how architects can use them without overreading.Wed, 04 Nov 2026 00:00:00 GMTNIST SP 800-53 vs. SP 800-171 Rev. 3, measured from the source datahttps://itsecurityarchitect.com/guides/nist-800-53-vs-800-171/https://itsecurityarchitect.com/guides/nist-800-53-vs-800-171/How SP 800-171 Rev. 3 derives from SP 800-53, with counts computed from NIST's OSCAL releases, the source-control links, and what that means for system design.Wed, 04 Nov 2026 00:00:00 GMTSecurity architect certifications compared, from the issuers' own pageshttps://itsecurityarchitect.com/guides/security-architect-certifications/https://itsecurityarchitect.com/guides/security-architect-certifications/ISSAP, Microsoft SC-100, CompTIA SecurityX and AWS Security Specialty side by side, with prerequisites and exam details checked on issuer pages.Wed, 04 Nov 2026 00:00:00 GMTHow to run a security architecture reviewhttps://itsecurityarchitect.com/guides/security-architecture-review/https://itsecurityarchitect.com/guides/security-architecture-review/A practical workflow for security design reviews, from scoping and diagrams to findings traced to NIST SP 800-53, CSF 2.0 and SP 800-171 controls.Wed, 04 Nov 2026 00:00:00 GMTSTRIDE threat modeling, with a worked examplehttps://itsecurityarchitect.com/guides/stride-threat-modeling/https://itsecurityarchitect.com/guides/stride-threat-modeling/How to apply STRIDE per element to a data-flow diagram, with a worked example of a document upload service and candidate NIST SP 800-53 controls for each threat.Wed, 04 Nov 2026 00:00:00 GMTWhat an IT security architect does, and what federal data says about payhttps://itsecurityarchitect.com/guides/what-does-a-security-architect-do/https://itsecurityarchitect.com/guides/what-does-a-security-architect-do/The security architect role through the NICE work role and its real deliverables, with federal wage statistics and an honest note on why salary figures disagree.Wed, 04 Nov 2026 00:00:00 GMT