Terms of use
Plain terms for a free reference site.
Use of the site
You may use the tools and guides for any lawful purpose, including commercial work for your employer or clients.
Not professional advice
The site provides general information and working aids. It is not legal, compliance, audit or assessment advice. Using the tools does not establish that any system meets SP 800-53, CSF 2.0, SP 800-171 or any other requirement. You are responsible for decisions you make with them.
No warranty
The site is provided "as is" without warranties of any kind, express or implied, including accuracy, completeness, fitness for a particular purpose and non-infringement. To the fullest extent permitted by law, IT Security Architect is not liable for any damages arising from use of the site.
Content ownership and reuse
- NIST material (control text, titles, baselines, crosswalks) is a U.S. government work and is not subject to copyright in the United States; NIST dedicates its OSCAL content to the public domain under CC0 1.0. You may reuse it freely; do not imply NIST endorsement.
- Our content (guides, review questions, prompts, diagrams, site design and code) is © IT Security Architect. You may quote reasonable excerpts with a link to the source page, and you may use exports generated from the tools in your own work without restriction.
- Quoted third-party text remains its owners'. The Threat Modeling Manifesto is licensed CC BY 4.0.
Your data
What you enter in the tools stays in your browser. See the privacy policy.
Changes
We may update these terms; the date above shows the latest version.
Governing law
These terms are governed by the laws of the United States and of the state in which the publisher is located, without regard to conflict-of-law rules.