References and Sources
This section lists the sources cited throughout the book. The numbered source index, ordered by source number, is the canonical bibliography: every inline citation of the form (N, author or organisation, year) links to the entry with that number. The index is grouped by category so that readers can locate European instruments, the standards and frameworks the security architect works with, the literature of security architecture and engineering, the evidence on AI in engineering work, the incidents and threat reporting that set the pace, the sources on public authorities and digital sovereignty, and the earlier volumes of the series quickly.
Many of the entries were carried over verbatim from the bibliographies of the earlier volumes of The Architecture as Code Series, and they keep the access dates recorded there. The remaining entries were added for this book on 2026-11-06 from the author's knowledge of the literature; they are listed in HANDOVER.md and must be verified with scripts/verify_sources.py before release.
Numbered source index
European and international instruments
- Source [1]: European Parliament and Council of the European Union (2024). Regulation (EU) 2024/1689 laying down harmonised rules on artificial intelligence (Artificial Intelligence Act). Official Journal of the European Union, 12 July 2024. Available at: https://eur-lex.europa.eu/eli/reg/2024/1689/oj (accessed 2026-10-31). Referenced in: Chapter 1: Introduction: The Security Architect Transformed, Chapter 3: Four Shifts: Code, Boundaries, Machine Speed and the AI Team, Chapter 4: The Transformed Role Defined: Mandate, Accountabilities and Decision Rights, Chapter 5: Security Architecture as Code: From Documents to Executable Design, Chapter 6: Threat Modelling Transformed: Continuous, Generated and AI-Assisted, Chapter 7: Designing Boundaries: Zero Trust and Containment for People, Agents and Machines, Chapter 8: Identity Architecture for Non-Human Actors: Workloads, Agents and Delegated Authority, Chapter 9: The Control Catalogue, Evidence and Assurance as the Architect's Artefacts, Chapter 10: Architecting at Machine Speed: Patch Velocity, Detection and the Stop Path by Design, Chapter 11: Resilience and Recovery by Design: The Architect's Share of Recoverability, Chapter 13: An AI Agent Team for Security Architecture: Skills, Mandates and Containment, Chapter 14: Verifying What AI Proposes: Review for Soundness When the Reviewer Depends on the AI, Chapter 15: Keeping the Craft: Deskilling, Judgement and the Architect Who Still Can, Chapter 16: The Role Map: CISO, Enterprise Architect, AI Architect, Platform and Product Teams, Chapter 18: Regulation as Constraint: AI Act, NIS 2, DORA, CRA and the Architect's Accountability, Chapter 20: Public Authorities and Multinationals: Sovereignty, Procurement and Many Legal Regimes, Chapter 21: Competences of the Transformed Security Architect: A Framework, Chapter 22: Learning Paths, Certification, Hiring and Upskilling, Chapter 23: The Future of the Role: Will There Be a Security Architect in 2036?, Chapter 24: Case Studies and Anti-Patterns, Chapter 25: A Year in the Role: The Transformed Architect at Nordvik Region and Hansa Mutual, Chapter 26: Nordvik Region and Hansa Mutual: Conclusions for Two Organisations, Chapter 27: Conclusions: The Transformed Security Architect.
- Source [2]: European Parliament and Council of the European Union (2026). Regulation (EU) 2026/1744 amending Regulations (EU) 2024/1689, (EU) 2018/1139 and (EU) 2023/1230 as regards the simplification of the implementation of harmonised rules on artificial intelligence (Digital Omnibus on AI). Official Journal of the European Union, 24 July 2026. Available at: https://eur-lex.europa.eu/eli/reg/2026/1744/oj (accessed 2026-10-31). Referenced in: Chapter 1: Introduction: The Security Architect Transformed, Chapter 4: The Transformed Role Defined: Mandate, Accountabilities and Decision Rights, Chapter 18: Regulation as Constraint: AI Act, NIS 2, DORA, CRA and the Architect's Accountability, Chapter 21: Competences of the Transformed Security Architect: A Framework, Chapter 22: Learning Paths, Certification, Hiring and Upskilling, Chapter 23: The Future of the Role: Will There Be a Security Architect in 2036?.
- Source [3]: European Commission (2026). Draft Commission guidelines on the classification of high-risk AI systems. Shaping Europe's digital future, 19 May 2026, last updated 23 July 2026. Available at: https://digital-strategy.ec.europa.eu/en/library/draft-commission-guidelines-classification-high-risk-ai-systems (accessed 2026-11-01). Referenced in: Chapter 18: Regulation as Constraint: AI Act, NIS 2, DORA, CRA and the Architect's Accountability.
- Source [4]: European Commission (2026). AI literacy: questions and answers. Shaping Europe's digital future, updated 20 October 2026. Available at: https://digital-strategy.ec.europa.eu/en/faqs/ai-literacy-questions-answers (accessed 2026-11-01). Referenced in: Chapter 4: The Transformed Role Defined: Mandate, Accountabilities and Decision Rights, Chapter 17: Design Authority, Decision Forums and Gates Instead of Meetings, Chapter 18: Regulation as Constraint: AI Act, NIS 2, DORA, CRA and the Architect's Accountability, Chapter 21: Competences of the Transformed Security Architect: A Framework, Chapter 22: Learning Paths, Certification, Hiring and Upskilling.
- Source [5]: European Parliament and Council of the European Union (2016). Regulation (EU) 2016/679 on the protection of natural persons with regard to the processing of personal data (General Data Protection Regulation). Official Journal of the European Union, 4 May 2016. Available at: https://eur-lex.europa.eu/eli/reg/2016/679/oj (accessed 2026-10-31). Referenced in: Chapter 12: The Architect's Own Use of AI: Drafting, Research and Review in Modes 1 to 3, Chapter 13: An AI Agent Team for Security Architecture: Skills, Mandates and Containment, Chapter 15: Keeping the Craft: Deskilling, Judgement and the Architect Who Still Can, Chapter 16: The Role Map: CISO, Enterprise Architect, AI Architect, Platform and Product Teams, Chapter 18: Regulation as Constraint: AI Act, NIS 2, DORA, CRA and the Architect's Accountability, Chapter 20: Public Authorities and Multinationals: Sovereignty, Procurement and Many Legal Regimes, Chapter 21: Competences of the Transformed Security Architect: A Framework, Chapter 22: Learning Paths, Certification, Hiring and Upskilling.
- Source [6]: European Parliament and Council of the European Union (2022). Directive (EU) 2022/2555 on measures for a high common level of cybersecurity across the Union (NIS 2 Directive). Official Journal of the European Union, 27 December 2022. Available at: https://eur-lex.europa.eu/eli/dir/2022/2555/oj (accessed 2026-10-31). Referenced in: Chapter 1: Introduction: The Security Architect Transformed, Chapter 2: What the Security Architect Did: The Role Before the Transformation, Chapter 3: Four Shifts: Code, Boundaries, Machine Speed and the AI Team, Chapter 4: The Transformed Role Defined: Mandate, Accountabilities and Decision Rights, Chapter 5: Security Architecture as Code: From Documents to Executable Design, Chapter 6: Threat Modelling Transformed: Continuous, Generated and AI-Assisted, Chapter 7: Designing Boundaries: Zero Trust and Containment for People, Agents and Machines, Chapter 8: Identity Architecture for Non-Human Actors: Workloads, Agents and Delegated Authority, Chapter 9: The Control Catalogue, Evidence and Assurance as the Architect's Artefacts, Chapter 10: Architecting at Machine Speed: Patch Velocity, Detection and the Stop Path by Design, Chapter 11: Resilience and Recovery by Design: The Architect's Share of Recoverability, Chapter 13: An AI Agent Team for Security Architecture: Skills, Mandates and Containment, Chapter 14: Verifying What AI Proposes: Review for Soundness When the Reviewer Depends on the AI, Chapter 16: The Role Map: CISO, Enterprise Architect, AI Architect, Platform and Product Teams, Chapter 17: Design Authority, Decision Forums and Gates Instead of Meetings, Chapter 18: Regulation as Constraint: AI Act, NIS 2, DORA, CRA and the Architect's Accountability, Chapter 19: Communicating Security Architecture: Boards, Supervisors, Auditors and Engineers, Chapter 20: Public Authorities and Multinationals: Sovereignty, Procurement and Many Legal Regimes, Chapter 21: Competences of the Transformed Security Architect: A Framework, Chapter 22: Learning Paths, Certification, Hiring and Upskilling, Chapter 23: The Future of the Role: Will There Be a Security Architect in 2036?, Chapter 24: Case Studies and Anti-Patterns, Chapter 26: Nordvik Region and Hansa Mutual: Conclusions for Two Organisations, Chapter 27: Conclusions: The Transformed Security Architect.
- Source [7]: European Commission (2024). Commission Implementing Regulation (EU) 2024/2690 laying down rules for the application of Directive (EU) 2022/2555 as regards technical and methodological requirements of cybersecurity risk-management measures. Official Journal of the European Union, 18 October 2024. Available at: https://eur-lex.europa.eu/eli/reg_impl/2024/2690/oj (accessed 2026-11-02). Referenced in: Chapter 4: The Transformed Role Defined: Mandate, Accountabilities and Decision Rights, Chapter 9: The Control Catalogue, Evidence and Assurance as the Architect's Artefacts, Chapter 11: Resilience and Recovery by Design: The Architect's Share of Recoverability, Chapter 18: Regulation as Constraint: AI Act, NIS 2, DORA, CRA and the Architect's Accountability, Chapter 20: Public Authorities and Multinationals: Sovereignty, Procurement and Many Legal Regimes.
- Source [8]: European Union Agency for Cybersecurity (2025). Technical implementation guidance on Commission Implementing Regulation (EU) 2024/2690 (version 1.0). ENISA, June 2025. Available at: https://www.enisa.europa.eu/sites/default/files/2025-06/ENISA_Technical_implementation_guidance_on_cybersecurity_risk_management_measures_version_1.0.pdf (accessed 2026-11-01). Referenced in: Chapter 11: Resilience and Recovery by Design: The Architect's Share of Recoverability, Chapter 18: Regulation as Constraint: AI Act, NIS 2, DORA, CRA and the Architect's Accountability.
- Source [9]: European Parliament and Council of the European Union (2022). Regulation (EU) 2022/2554 on digital operational resilience for the financial sector (DORA). Official Journal of the European Union, 27 December 2022. Available at: https://eur-lex.europa.eu/eli/reg/2022/2554/oj (accessed 2026-10-31). Referenced in: Chapter 1: Introduction: The Security Architect Transformed, Chapter 2: What the Security Architect Did: The Role Before the Transformation, Chapter 3: Four Shifts: Code, Boundaries, Machine Speed and the AI Team, Chapter 4: The Transformed Role Defined: Mandate, Accountabilities and Decision Rights, Chapter 5: Security Architecture as Code: From Documents to Executable Design, Chapter 6: Threat Modelling Transformed: Continuous, Generated and AI-Assisted, Chapter 7: Designing Boundaries: Zero Trust and Containment for People, Agents and Machines, Chapter 8: Identity Architecture for Non-Human Actors: Workloads, Agents and Delegated Authority, Chapter 9: The Control Catalogue, Evidence and Assurance as the Architect's Artefacts, Chapter 10: Architecting at Machine Speed: Patch Velocity, Detection and the Stop Path by Design, Chapter 11: Resilience and Recovery by Design: The Architect's Share of Recoverability, Chapter 12: The Architect's Own Use of AI: Drafting, Research and Review in Modes 1 to 3, Chapter 13: An AI Agent Team for Security Architecture: Skills, Mandates and Containment, Chapter 14: Verifying What AI Proposes: Review for Soundness When the Reviewer Depends on the AI, Chapter 16: The Role Map: CISO, Enterprise Architect, AI Architect, Platform and Product Teams, Chapter 17: Design Authority, Decision Forums and Gates Instead of Meetings, Chapter 18: Regulation as Constraint: AI Act, NIS 2, DORA, CRA and the Architect's Accountability, Chapter 19: Communicating Security Architecture: Boards, Supervisors, Auditors and Engineers, Chapter 20: Public Authorities and Multinationals: Sovereignty, Procurement and Many Legal Regimes, Chapter 21: Competences of the Transformed Security Architect: A Framework, Chapter 22: Learning Paths, Certification, Hiring and Upskilling, Chapter 23: The Future of the Role: Will There Be a Security Architect in 2036?, Chapter 26: Nordvik Region and Hansa Mutual: Conclusions for Two Organisations, Chapter 27: Conclusions: The Transformed Security Architect.
- Source [10]: European Commission (2024). Commission Delegated Regulation (EU) 2024/1774 supplementing Regulation (EU) 2022/2554 with regard to regulatory technical standards specifying ICT risk management tools, methods, processes, and policies and the simplified ICT risk management framework. Official Journal of the European Union, 25 June 2024. Available at: https://eur-lex.europa.eu/eli/reg_del/2024/1774/oj (accessed 2026-11-06). Referenced in: Chapter 9: The Control Catalogue, Evidence and Assurance as the Architect's Artefacts, Chapter 11: Resilience and Recovery by Design: The Architect's Share of Recoverability, Chapter 18: Regulation as Constraint: AI Act, NIS 2, DORA, CRA and the Architect's Accountability.
- Source [11]: European Supervisory Authorities: EBA, EIOPA and ESMA (2025). European Supervisory Authorities designate critical ICT third-party providers and List of designated CTPPs. ESMA, 18 November 2025. Available at: https://www.esma.europa.eu/press-news/esma-news/european-supervisory-authorities-designate-critical-ict-third-party-providers (accessed 2026-11-01). Referenced in: Chapter 11: Resilience and Recovery by Design: The Architect's Share of Recoverability, Chapter 18: Regulation as Constraint: AI Act, NIS 2, DORA, CRA and the Architect's Accountability, Chapter 20: Public Authorities and Multinationals: Sovereignty, Procurement and Many Legal Regimes.
- Source [12]: European Parliament and Council of the European Union (2024). Regulation (EU) 2024/2847 on horizontal cybersecurity requirements for products with digital elements (Cyber Resilience Act). Official Journal of the European Union, 20 November 2024. Available at: https://eur-lex.europa.eu/eli/reg/2024/2847/oj (accessed 2026-10-31). Referenced in: Chapter 1: Introduction: The Security Architect Transformed, Chapter 10: Architecting at Machine Speed: Patch Velocity, Detection and the Stop Path by Design, Chapter 18: Regulation as Constraint: AI Act, NIS 2, DORA, CRA and the Architect's Accountability, Chapter 20: Public Authorities and Multinationals: Sovereignty, Procurement and Many Legal Regimes, Chapter 26: Nordvik Region and Hansa Mutual: Conclusions for Two Organisations, Chapter 27: Conclusions: The Transformed Security Architect.
- Source [13]: European Commission (2026). Cyber Resilience Act – Reporting obligations. Shaping Europe's digital future, updated 11 September 2026. Available at: https://digital-strategy.ec.europa.eu/en/policies/cra-reporting (accessed 2026-11-01). Referenced in: Chapter 1: Introduction: The Security Architect Transformed, Chapter 10: Architecting at Machine Speed: Patch Velocity, Detection and the Stop Path by Design, Chapter 18: Regulation as Constraint: AI Act, NIS 2, DORA, CRA and the Architect's Accountability.
- Source [14]: European Parliament and Council of the European Union (2019). Regulation (EU) 2019/881 on ENISA (the European Union Agency for Cybersecurity) and on information and communications technology cybersecurity certification (Cybersecurity Act). Official Journal of the European Union, 7 June 2019. Available at: https://eur-lex.europa.eu/eli/reg/2019/881/oj (accessed 2026-11-06). Referenced in: Chapter 20: Public Authorities and Multinationals: Sovereignty, Procurement and Many Legal Regimes.
- Source [15]: European Parliament and Council of the European Union (2024). Regulation (EU) 2024/1183 amending Regulation (EU) No 910/2014 as regards establishing the European Digital Identity Framework. Official Journal of the European Union, 30 April 2024. Available at: https://eur-lex.europa.eu/eli/reg/2024/1183/oj (accessed 2026-10-31). Referenced in: Chapter 8: Identity Architecture for Non-Human Actors: Workloads, Agents and Delegated Authority.
- Source [16]: European Parliament and Council of the European Union (2023). Regulation (EU) 2023/2854 on harmonised rules on fair access to and use of data (Data Act). Official Journal of the European Union, 22 December 2023. Available at: https://eur-lex.europa.eu/eli/reg/2023/2854/oj (accessed 2026-10-31). Referenced in: Chapter 20: Public Authorities and Multinationals: Sovereignty, Procurement and Many Legal Regimes.
- Source [17]: European Parliament and Council of the European Union (2024). Regulation (EU) 2024/903 laying down measures for a high level of public sector interoperability across the Union (Interoperable Europe Act). Official Journal of the European Union, 22 March 2024. Available at: https://eur-lex.europa.eu/eli/reg/2024/903/oj (accessed 2026-10-31). Referenced in: Chapter 20: Public Authorities and Multinationals: Sovereignty, Procurement and Many Legal Regimes.
- Source [18]: European Parliament and Council of the European Union (2014). Directive 2014/24/EU on public procurement. Official Journal of the European Union, 28 March 2014. Available at: https://eur-lex.europa.eu/eli/dir/2014/24/oj (accessed 2026-10-31). Referenced in: Chapter 1: Introduction: The Security Architect Transformed, Chapter 19: Communicating Security Architecture: Boards, Supervisors, Auditors and Engineers, Chapter 20: Public Authorities and Multinationals: Sovereignty, Procurement and Many Legal Regimes, Chapter 22: Learning Paths, Certification, Hiring and Upskilling, Chapter 24: Case Studies and Anti-Patterns, Chapter 26: Nordvik Region and Hansa Mutual: Conclusions for Two Organisations.
- Source [19]: European Parliament and Council of the European Union (2009). Directive 2009/138/EC on the taking-up and pursuit of the business of Insurance and Reinsurance (Solvency II) (recast). Official Journal of the European Union, L 335, 17 December 2009. Available at: https://eur-lex.europa.eu/eli/dir/2009/138/oj (accessed 2026-11-02). Referenced in: Chapter 16: The Role Map: CISO, Enterprise Architect, AI Architect, Platform and Product Teams, Chapter 26: Nordvik Region and Hansa Mutual: Conclusions for Two Organisations.
- Source [20]: European Insurance and Occupational Pensions Authority (2025). Opinion on Artificial Intelligence governance and risk management. EIOPA, 6 August 2025. Available at: https://www.eiopa.europa.eu/publications/opinion-artificial-intelligence-governance-and-risk-management_en (accessed 2026-11-01). Referenced in: Chapter 18: Regulation as Constraint: AI Act, NIS 2, DORA, CRA and the Architect's Accountability, Chapter 19: Communicating Security Architecture: Boards, Supervisors, Auditors and Engineers.
- Source [21]: European Central Bank (2026). Addressing AI-enabled cybersecurity threats (letter to the chief executive officers of significant institutions, SSM-2026-0301). ECB Banking Supervision, 7 July 2026. Available at: https://www.bankingsupervision.europa.eu/press/letterstobanks/shared/pdf/2026/ssm.2026_letter_on_AI_enabled_cybersecurity_threats.en.pdf (accessed 2026-11-01). Referenced in: Chapter 10: Architecting at Machine Speed: Patch Velocity, Detection and the Stop Path by Design, Chapter 19: Communicating Security Architecture: Boards, Supervisors, Auditors and Engineers.
- Source [22]: Federal Republic of Germany (2001). Betriebsverfassungsgesetz (BetrVG) (Works Constitution Act), as last amended on 19 July 2024. Federal Ministry of Justice, Gesetze im Internet. Available at: https://www.gesetze-im-internet.de/betrvg/ (accessed 2026-11-01). Referenced in: Chapter 1: Introduction: The Security Architect Transformed, Chapter 4: The Transformed Role Defined: Mandate, Accountabilities and Decision Rights, Chapter 13: An AI Agent Team for Security Architecture: Skills, Mandates and Containment, Chapter 14: Verifying What AI Proposes: Review for Soundness When the Reviewer Depends on the AI, Chapter 15: Keeping the Craft: Deskilling, Judgement and the Architect Who Still Can, Chapter 21: Competences of the Transformed Security Architect: A Framework, Chapter 22: Learning Paths, Certification, Hiring and Upskilling, Chapter 25: A Year in the Role: The Transformed Architect at Nordvik Region and Hansa Mutual, Chapter 26: Nordvik Region and Hansa Mutual: Conclusions for Two Organisations.
Standards, frameworks and taxonomies
- Source [23]: International Organization for Standardization and International Electrotechnical Commission (2022). ISO/IEC 27001:2022 Information security, cybersecurity and privacy protection — Information security management systems — Requirements. Geneva: ISO, October 2022. Available at: https://www.iso.org/standard/27001 (accessed 2026-11-01). Referenced in: Chapter 2: What the Security Architect Did: The Role Before the Transformation, Chapter 4: The Transformed Role Defined: Mandate, Accountabilities and Decision Rights, Chapter 9: The Control Catalogue, Evidence and Assurance as the Architect's Artefacts, Chapter 16: The Role Map: CISO, Enterprise Architect, AI Architect, Platform and Product Teams, Chapter 17: Design Authority, Decision Forums and Gates Instead of Meetings, Chapter 19: Communicating Security Architecture: Boards, Supervisors, Auditors and Engineers, Chapter 24: Case Studies and Anti-Patterns, Chapter 26: Nordvik Region and Hansa Mutual: Conclusions for Two Organisations.
- Source [24]: International Organization for Standardization and International Electrotechnical Commission (2022). ISO/IEC 27002:2022 Information security, cybersecurity and privacy protection — Information security controls. Geneva: ISO, February 2022. Available at: https://www.iso.org/standard/75652.html (accessed 2026-11-01). Referenced in: Chapter 2: What the Security Architect Did: The Role Before the Transformation, Chapter 4: The Transformed Role Defined: Mandate, Accountabilities and Decision Rights, Chapter 9: The Control Catalogue, Evidence and Assurance as the Architect's Artefacts, Chapter 20: Public Authorities and Multinationals: Sovereignty, Procurement and Many Legal Regimes.
- Source [25]: International Organization for Standardization and International Electrotechnical Commission (2022). ISO/IEC 27005:2022 Information security, cybersecurity and privacy protection — Guidance on managing information security risks. Geneva: ISO, October 2022. Available at: https://www.iso.org/standard/80585.html (accessed 2026-11-06). Referenced in: Chapter 2: What the Security Architect Did: The Role Before the Transformation.
- Source [26]: International Organization for Standardization and International Electrotechnical Commission (2021). ISO/IEC 27036-1:2021 Cybersecurity — Supplier relationships — Part 1: Overview and concepts. Geneva: ISO, 2021. Available at: https://www.iso.org/standard/82905.html (accessed 2026-11-06). Referenced in: Chapter 20: Public Authorities and Multinationals: Sovereignty, Procurement and Many Legal Regimes.
- Source [27]: International Organization for Standardization and International Electrotechnical Commission (2023). ISO/IEC 42001:2023 Information technology — Artificial intelligence — Management system. Geneva: ISO, December 2023. Available at: https://www.iso.org/standard/42001 (accessed 2026-10-31). Referenced in: Chapter 9: The Control Catalogue, Evidence and Assurance as the Architect's Artefacts.
- Source [28]: International Organization for Standardization, International Electrotechnical Commission and Institute of Electrical and Electronics Engineers (2022). ISO/IEC/IEEE 42010:2022 Software, systems and enterprise — Architecture description. Geneva: ISO, November 2022. Available at: https://www.iso.org/standard/74393.html (accessed 2026-11-06). Referenced in: Chapter 5: Security Architecture as Code: From Documents to Executable Design, Chapter 19: Communicating Security Architecture: Boards, Supervisors, Auditors and Engineers.
- Source [29]: NIST (2024). The NIST Cybersecurity Framework (CSF) 2.0. NIST CSWP 29, 26 February 2024. Available at: https://doi.org/10.6028/NIST.CSWP.29 (accessed 2026-10-30). Referenced in: Chapter 9: The Control Catalogue, Evidence and Assurance as the Architect's Artefacts, Chapter 11: Resilience and Recovery by Design: The Architect's Share of Recoverability, Chapter 19: Communicating Security Architecture: Boards, Supervisors, Auditors and Engineers.
- Source [30]: Vassilev, A., Oprea, A., Fordyce, A., Anderson, H., Davies, X. & Hamin, M. (2025). Adversarial Machine Learning: A Taxonomy and Terminology of Attacks and Mitigations. NIST AI 100-2 E2025. National Institute of Standards and Technology, 24 March 2025. Available at: https://doi.org/10.6028/NIST.AI.100-2e2025 (accessed 2026-11-01). Referenced in: Chapter 6: Threat Modelling Transformed: Continuous, Generated and AI-Assisted, Chapter 11: Resilience and Recovery by Design: The Architect's Share of Recoverability.
- Source [31]: Rose, S., Borchert, O., Mitchell, S. & Connelly, S (2020). Zero Trust Architecture. NIST Special Publication 800-207, August 2020. Available at: https://doi.org/10.6028/NIST.SP.800-207 (accessed 2026-10-30). Referenced in: Chapter 3: Four Shifts: Code, Boundaries, Machine Speed and the AI Team, Chapter 7: Designing Boundaries: Zero Trust and Containment for People, Agents and Machines, Chapter 8: Identity Architecture for Non-Human Actors: Workloads, Agents and Delegated Authority, Chapter 27: Conclusions: The Transformed Security Architect.
- Source [32]: National Institute of Standards and Technology, Joint Task Force (2020). Security and Privacy Controls for Information Systems and Organizations. NIST Special Publication 800-53, Revision 5, September 2020 (includes updates as of 10 December 2020). Available at: https://csrc.nist.gov/pubs/sp/800/53/r5/upd1/final (accessed 2026-10-30). DOI: https://doi.org/10.6028/NIST.SP.800-53r5. Referenced in: Chapter 9: The Control Catalogue, Evidence and Assurance as the Architect's Artefacts.
- Source [33]: Petersen, R., Santos, D., Wetzel, K. A., Smith, M. C. & Witte, G. (2020). Workforce Framework for Cybersecurity (NICE Framework). NIST Special Publication 800-181, Revision 1. National Institute of Standards and Technology, November 2020. Available at: https://doi.org/10.6028/NIST.SP.800-181r1 (accessed 2026-11-06). Referenced in: Chapter 16: The Role Map: CISO, Enterprise Architect, AI Architect, Platform and Product Teams, Chapter 21: Competences of the Transformed Security Architect: A Framework, Chapter 22: Learning Paths, Certification, Hiring and Upskilling.
- Source [34]: Souppaya, M., Scarfone, K. & Dodson, D (2022). Secure Software Development Framework (SSDF) Version 1.1: Recommendations for Mitigating the Risk of Software Vulnerabilities. NIST Special Publication 800-218, February 2022. Available at: https://doi.org/10.6028/NIST.SP.800-218 (accessed 2026-10-30). Referenced in: Chapter 5: Security Architecture as Code: From Documents to Executable Design.
- Source [35]: Souppaya, M. & Scarfone, K. (2022). Guide to Enterprise Patch Management Planning: Preventive Maintenance for Technology. NIST Special Publication 800-40, Revision 4. National Institute of Standards and Technology, April 2022. Available at: https://doi.org/10.6028/NIST.SP.800-40r4 (accessed 2026-11-01). Referenced in: Chapter 10: Architecting at Machine Speed: Patch Velocity, Detection and the Stop Path by Design, Chapter 19: Communicating Security Architecture: Boards, Supervisors, Auditors and Engineers.
- Source [36]: Bartock, M., Cichonski, J., Souppaya, M., Smith, M., Witte, G. & Scarfone, K. (2016). Guide for Cybersecurity Event Recovery. NIST SP 800-184. National Institute of Standards and Technology, December 2016. Available at: https://doi.org/10.6028/NIST.SP.800-184 (accessed 2026-11-02). Referenced in: Chapter 11: Resilience and Recovery by Design: The Architect's Share of Recoverability.
- Source [37]: Cybersecurity and Infrastructure Security Agency (2023). Zero Trust Maturity Model, Version 2.0. CISA, April 2023. Available at: https://www.cisa.gov/zero-trust-maturity-model (accessed 2026-11-06). Referenced in: Chapter 2: What the Security Architect Did: The Role Before the Transformation, Chapter 7: Designing Boundaries: Zero Trust and Containment for People, Agents and Machines.
- Source [38]: Sherwood, J., Clark, A. & Lynas, D. (2005). Enterprise Security Architecture: A Business-Driven Approach. San Francisco, CA: CMP Books. ISBN 978-1-57820-318-5. Available at: https://sabsa.org/ (accessed 2026-11-06). Referenced in: Chapter 2: What the Security Architect Did: The Role Before the Transformation, Chapter 16: The Role Map: CISO, Enterprise Architect, AI Architect, Platform and Product Teams, Chapter 22: Learning Paths, Certification, Hiring and Upskilling.
- Source [39]: The Open Group (2022). The TOGAF Standard, 10th Edition. The Open Group, April 2022. Available at: https://www.opengroup.org/togaf (accessed 2026-11-06). Referenced in: Chapter 2: What the Security Architect Did: The Role Before the Transformation, Chapter 16: The Role Map: CISO, Enterprise Architect, AI Architect, Platform and Product Teams, Chapter 22: Learning Paths, Certification, Hiring and Upskilling.
- Source [40]: The Open Group (2016). Integrating Risk and Security within a TOGAF Enterprise Architecture. The Open Group Guide G152, January 2016. Available at: https://publications.opengroup.org/g152 (accessed 2026-11-06). Referenced in: Chapter 2: What the Security Architect Did: The Role Before the Transformation, Chapter 16: The Role Map: CISO, Enterprise Architect, AI Architect, Platform and Product Teams.
- Source [41]: European Union Agency for Cybersecurity (2022). European Cybersecurity Skills Framework (ECSF): Role profiles. ENISA, September 2022. Available at: https://www.enisa.europa.eu/publications/european-cybersecurity-skills-framework-role-profiles (accessed 2026-11-06). Referenced in: Chapter 1: Introduction: The Security Architect Transformed, Chapter 4: The Transformed Role Defined: Mandate, Accountabilities and Decision Rights, Chapter 16: The Role Map: CISO, Enterprise Architect, AI Architect, Platform and Product Teams, Chapter 21: Competences of the Transformed Security Architect: A Framework, Chapter 22: Learning Paths, Certification, Hiring and Upskilling, Chapter 25: A Year in the Role: The Transformed Architect at Nordvik Region and Hansa Mutual, Chapter 27: Conclusions: The Transformed Security Architect.
- Source [42]: European Union Agency for Cybersecurity (2022). European Cybersecurity Skills Framework (ECSF): User manual. ENISA, September 2022. Available at: https://www.enisa.europa.eu/publications/european-cybersecurity-skills-framework-ecsf-user-manual (accessed 2026-11-06). Referenced in: Chapter 21: Competences of the Transformed Security Architect: A Framework, Chapter 22: Learning Paths, Certification, Hiring and Upskilling.
- Source [43]: SFIA Foundation (2024). SFIA 9: The global skills and competency framework for a digital world. SFIA Foundation, October 2024. Available at: https://sfia-online.org/en/sfia-9 (accessed 2026-11-06). Referenced in: Chapter 4: The Transformed Role Defined: Mandate, Accountabilities and Decision Rights, Chapter 21: Competences of the Transformed Security Architect: A Framework, Chapter 22: Learning Paths, Certification, Hiring and Upskilling.
- Source [44]: OWASP Foundation. OWASP Top 10 for Large Language Model Applications, 2025 edition. OWASP GenAI Security Project. Available at: https://genai.owasp.org/llm-top-10/ (accessed 2026-10-31). Referenced in: Chapter 6: Threat Modelling Transformed: Continuous, Generated and AI-Assisted, Chapter 12: The Architect's Own Use of AI: Drafting, Research and Review in Modes 1 to 3, Chapter 21: Competences of the Transformed Security Architect: A Framework.
- Source [45]: OWASP Foundation (2025). OWASP Top 10 for Agentic Applications for 2026. OWASP GenAI Security Project, 9 December 2025. Available at: https://genai.owasp.org/resource/owasp-top-10-for-agentic-applications-for-2026/ (accessed 2026-11-01). Referenced in: Chapter 6: Threat Modelling Transformed: Continuous, Generated and AI-Assisted, Chapter 7: Designing Boundaries: Zero Trust and Containment for People, Agents and Machines, Chapter 8: Identity Architecture for Non-Human Actors: Workloads, Agents and Delegated Authority, Chapter 13: An AI Agent Team for Security Architecture: Skills, Mandates and Containment, Chapter 21: Competences of the Transformed Security Architect: A Framework.
- Source [46]: MITRE Corporation. MITRE ATT&CK: Adversarial Tactics, Techniques, and Common Knowledge. Available at: https://attack.mitre.org/ (accessed 2026-11-02). Referenced in: Chapter 1: Introduction: The Security Architect Transformed, Chapter 6: Threat Modelling Transformed: Continuous, Generated and AI-Assisted, Chapter 7: Designing Boundaries: Zero Trust and Containment for People, Agents and Machines, Chapter 8: Identity Architecture for Non-Human Actors: Workloads, Agents and Delegated Authority, Chapter 10: Architecting at Machine Speed: Patch Velocity, Detection and the Stop Path by Design, Chapter 11: Resilience and Recovery by Design: The Architect's Share of Recoverability, Chapter 13: An AI Agent Team for Security Architecture: Skills, Mandates and Containment, Chapter 21: Competences of the Transformed Security Architect: A Framework.
- Source [47]: MITRE Corporation. MITRE ATLAS: Adversarial Threat Landscape for Artificial-Intelligence Systems. Available at: https://atlas.mitre.org/ (accessed 2026-10-31). Referenced in: Chapter 1: Introduction: The Security Architect Transformed, Chapter 6: Threat Modelling Transformed: Continuous, Generated and AI-Assisted, Chapter 7: Designing Boundaries: Zero Trust and Containment for People, Agents and Machines, Chapter 10: Architecting at Machine Speed: Patch Velocity, Detection and the Stop Path by Design, Chapter 13: An AI Agent Team for Security Architecture: Skills, Mandates and Containment, Chapter 21: Competences of the Transformed Security Architect: A Framework.
- Source [48]: MITRE Corporation. MITRE D3FEND: A knowledge graph of cybersecurity countermeasures. Available at: https://d3fend.mitre.org/ (accessed 2026-11-02). Referenced in: Chapter 6: Threat Modelling Transformed: Continuous, Generated and AI-Assisted, Chapter 10: Architecting at Machine Speed: Patch Velocity, Detection and the Stop Path by Design.
- Source [49]: Threat Modeling Manifesto Working Group (2020). Threat Modeling Manifesto. 2020. Available at: https://www.threatmodelingmanifesto.org/ (accessed 2026-10-30). Referenced in: Chapter 6: Threat Modelling Transformed: Continuous, Generated and AI-Assisted.
- Source [50]: Microsoft Learn (2017). Threats – Microsoft Threat Modeling Tool (STRIDE model). Azure security documentation, article dated 17 August 2017, last updated 4 March 2026. Available at: https://learn.microsoft.com/en-us/azure/security/develop/threat-modeling-tool-threats (accessed 2026-10-30). Referenced in: Chapter 6: Threat Modelling Transformed: Continuous, Generated and AI-Assisted.
- Source [51]: Open Source Security Foundation. Supply-chain Levels for Software Artifacts (SLSA). Available at: https://slsa.dev/ (accessed 2026-10-31). Referenced in: Chapter 11: Resilience and Recovery by Design: The Architect's Share of Recoverability, Chapter 14: Verifying What AI Proposes: Review for Soundness When the Reviewer Depends on the AI, Chapter 16: The Role Map: CISO, Enterprise Architect, AI Architect, Platform and Product Teams.
- Source [52]: Sigstore Project. Sigstore: Signing, verification and provenance for software artefacts. Available at: https://www.sigstore.dev/ (accessed 2026-10-31). Referenced in: Chapter 9: The Control Catalogue, Evidence and Assurance as the Architect's Artefacts, Chapter 11: Resilience and Recovery by Design: The Architect's Share of Recoverability, Chapter 14: Verifying What AI Proposes: Review for Soundness When the Reviewer Depends on the AI.
- Source [53]: NTIA (2021). The Minimum Elements For a Software Bill of Materials (SBOM). US Department of Commerce, National Telecommunications and Information Administration, 12 July 2021. Available at: https://www.ntia.gov/report/2021/minimum-elements-software-bill-materials-sbom (accessed 2026-10-30). Referenced in: Chapter 16: The Role Map: CISO, Enterprise Architect, AI Architect, Platform and Product Teams.
- Source [54]: Ecma International (2025). ECMA-424: CycloneDX Bill of Materials Specification, 2nd edition. Ecma International, December 2025. Available at: https://ecma-international.org/publications-and-standards/standards/ecma-424/ (accessed 2026-11-01). Referenced in: Chapter 20: Public Authorities and Multinationals: Sovereignty, Procurement and Many Legal Regimes.
- Source [55]: SPIFFE Project. Secure Production Identity Framework for Everyone (SPIFFE) specifications and the SPIRE reference implementation. Cloud Native Computing Foundation. Available at: https://spiffe.io/docs/latest/spiffe-about/overview/ (accessed 2026-11-06). Referenced in: Chapter 8: Identity Architecture for Non-Human Actors: Workloads, Agents and Delegated Authority.
- Source [56]: Jones, M., Nadalin, A., Campbell, B., Bradley, J. & Mortimore, C. (2020). OAuth 2.0 Token Exchange. RFC 8693, Internet Engineering Task Force, January 2020. Available at: https://www.rfc-editor.org/rfc/rfc8693 (accessed 2026-11-06). Referenced in: Chapter 8: Identity Architecture for Non-Human Actors: Workloads, Agents and Delegated Authority.
- Source [57]: Anthropic (2024). Model Context Protocol Specification. November 2024, revised 2025. Available at: https://modelcontextprotocol.io/ (accessed 2026-10-31). Referenced in: Chapter 8: Identity Architecture for Non-Human Actors: Workloads, Agents and Delegated Authority.
- Source [58]: Model Context Protocol (2025). Security Best Practices. MCP specification version 2025-11-25. Available at: https://modelcontextprotocol.io/specification/2025-11-25/basic/security_best_practices (accessed 2026-11-01). Referenced in: Chapter 7: Designing Boundaries: Zero Trust and Containment for People, Agents and Machines, Chapter 8: Identity Architecture for Non-Human Actors: Workloads, Agents and Delegated Authority, Chapter 13: An AI Agent Team for Security Architecture: Skills, Mandates and Containment.
- Source [59]: Brown, S. The C4 model for visualising software architecture. Available at: https://c4model.com/ (accessed 2026-10-30). Referenced in: Chapter 5: Security Architecture as Code: From Documents to Executable Design, Chapter 19: Communicating Security Architecture: Boards, Supervisors, Auditors and Engineers.
- Source [60]: Structurizr. Structurizr DSL language reference. Structurizr documentation. Available at: https://docs.structurizr.com/dsl/language (accessed 2026-10-30). Referenced in: Chapter 3: Four Shifts: Code, Boundaries, Machine Speed and the AI Team, Chapter 5: Security Architecture as Code: From Documents to Executable Design, Chapter 6: Threat Modelling Transformed: Continuous, Generated and AI-Assisted, Chapter 19: Communicating Security Architecture: Boards, Supervisors, Auditors and Engineers.
- Source [61]: FINOS. Architecture as Code: What is CALM? FINOS Architecture as Code project. Available at: https://calm.finos.org/ (accessed 2026-10-30). Referenced in: Chapter 3: Four Shifts: Code, Boundaries, Machine Speed and the AI Team, Chapter 5: Security Architecture as Code: From Documents to Executable Design, Chapter 19: Communicating Security Architecture: Boards, Supervisors, Auditors and Engineers.
- Source [62]: Open Policy Agent Contributors. Open Policy Agent Documentation. Cloud Native Computing Foundation. Available at: https://www.openpolicyagent.org/docs/ (accessed 2026-10-31). Referenced in: Chapter 3: Four Shifts: Code, Boundaries, Machine Speed and the AI Team, Chapter 5: Security Architecture as Code: From Documents to Executable Design, Chapter 6: Threat Modelling Transformed: Continuous, Generated and AI-Assisted, Chapter 9: The Control Catalogue, Evidence and Assurance as the Architect's Artefacts, Chapter 13: An AI Agent Team for Security Architecture: Skills, Mandates and Containment, Chapter 17: Design Authority, Decision Forums and Gates Instead of Meetings, Chapter 21: Competences of the Transformed Security Architect: A Framework.
- Source [63]: Nygard, M (2011). Documenting Architecture Decisions. Cognitect blog, 15 November 2011. Available at: https://cognitect.com/blog/2011/11/15/documenting-architecture-decisions (accessed 2026-10-31). Referenced in: Chapter 4: The Transformed Role Defined: Mandate, Accountabilities and Decision Rights, Chapter 5: Security Architecture as Code: From Documents to Executable Design, Chapter 14: Verifying What AI Proposes: Review for Soundness When the Reviewer Depends on the AI, Chapter 17: Design Authority, Decision Forums and Gates Instead of Meetings, Chapter 19: Communicating Security Architecture: Boards, Supervisors, Auditors and Engineers.
Security architecture, engineering and the profession
- Source [64]: Saltzer, J. H. & Schroeder, M. D. (1975). The Protection of Information in Computer Systems. Proceedings of the IEEE, 63(9), 1278–1308. Available at: https://doi.org/10.1109/PROC.1975.9939 (accessed 2026-11-06). Referenced in: Chapter 2: What the Security Architect Did: The Role Before the Transformation, Chapter 7: Designing Boundaries: Zero Trust and Containment for People, Agents and Machines, Chapter 21: Competences of the Transformed Security Architect: A Framework.
- Source [65]: Anderson, R. (2020). Security Engineering: A Guide to Building Dependable Distributed Systems. 3rd edition. Indianapolis, IN: Wiley. ISBN 978-1-119-64278-7. Available at: https://www.cl.cam.ac.uk/~rja14/book.html (accessed 2026-11-06). Referenced in: Chapter 2: What the Security Architect Did: The Role Before the Transformation.
- Source [66]: Schneier, B. (2000). Secrets and Lies: Digital Security in a Networked World. New York: John Wiley & Sons. ISBN 978-0-471-25311-2. Available at: https://www.schneier.com/books/secrets-and-lies/ (accessed 2026-11-06). Referenced in: Chapter 2: What the Security Architect Did: The Role Before the Transformation.
- Source [67]: Kindervag, J. (2010). No More Chewy Centers: Introducing the Zero Trust Model of Information Security. Forrester Research, 14 September 2010. Available at: https://www.forrester.com/report/No-More-Chewy-Centers-The-Zero-Trust-Model-Of-Information-Security/RES56682 (accessed 2026-11-06). Referenced in: Chapter 2: What the Security Architect Did: The Role Before the Transformation, Chapter 7: Designing Boundaries: Zero Trust and Containment for People, Agents and Machines.
- Source [68]: Ward, R. & Beyer, B. (2014). BeyondCorp: A New Approach to Enterprise Security. ;login:, 39(6), 6–11. Available at: https://research.google/pubs/beyondcorp-a-new-approach-to-enterprise-security/ (accessed 2026-11-06). Referenced in: Chapter 3: Four Shifts: Code, Boundaries, Machine Speed and the AI Team, Chapter 7: Designing Boundaries: Zero Trust and Containment for People, Agents and Machines.
- Source [69]: Adkins, H., Beyer, B., Blankinship, P., Lewandowski, P., Oprea, A. & Stubblefield, A. (2020). Building Secure and Reliable Systems: Best Practices for Designing, Implementing, and Maintaining Systems. Sebastopol, CA: O'Reilly Media. ISBN 978-1-492-08312-2. Available at: https://sre.google/books/building-secure-reliable-systems/ (accessed 2026-11-06). Referenced in: Chapter 7: Designing Boundaries: Zero Trust and Containment for People, Agents and Machines, Chapter 11: Resilience and Recovery by Design: The Architect's Share of Recoverability.
- Source [70]: National Cyber Security Centre (2019). Secure design principles: Guides for the design of cyber secure systems. NCSC. Available at: https://www.ncsc.gov.uk/collection/cyber-security-design-principles (accessed 2026-11-06). Referenced in: Chapter 2: What the Security Architect Did: The Role Before the Transformation, Chapter 7: Designing Boundaries: Zero Trust and Containment for People, Agents and Machines.
- Source [71]: Shostack, A. (2014). Threat Modeling: Designing for Security. Indianapolis, IN: Wiley. ISBN 978-1-118-80999-0. Available at: https://shostack.org/books/threat-modeling-book (accessed 2026-11-06). Referenced in: Chapter 6: Threat Modelling Transformed: Continuous, Generated and AI-Assisted, Chapter 21: Competences of the Transformed Security Architect: A Framework.
- Source [72]: Ross, J. W., Weill, P. & Robertson, D. C. (2006). Enterprise Architecture as Strategy: Creating a Foundation for Business Execution. Boston, MA: Harvard Business School Press. ISBN 978-1-59139-839-4. Referenced in: Chapter 16: The Role Map: CISO, Enterprise Architect, AI Architect, Platform and Product Teams.
- Source [73]: Fowler, M. (2003). Who Needs an Architect? IEEE Software, 20(5), 11–13. Available at: https://martinfowler.com/ieeeSoftware/whoNeedsArchitect.pdf (accessed 2026-11-06). Referenced in: Chapter 1: Introduction: The Security Architect Transformed, Chapter 2: What the Security Architect Did: The Role Before the Transformation, Chapter 4: The Transformed Role Defined: Mandate, Accountabilities and Decision Rights, Chapter 16: The Role Map: CISO, Enterprise Architect, AI Architect, Platform and Product Teams, Chapter 27: Conclusions: The Transformed Security Architect.
- Source [74]: Hohpe, G. (2020). The Software Architect Elevator: Redefining the Architect's Role in the Digital Enterprise. Sebastopol, CA: O'Reilly Media. Available at: https://architectelevator.com/book/ (accessed 2026-11-06). Referenced in: Chapter 1: Introduction: The Security Architect Transformed, Chapter 4: The Transformed Role Defined: Mandate, Accountabilities and Decision Rights, Chapter 16: The Role Map: CISO, Enterprise Architect, AI Architect, Platform and Product Teams, Chapter 19: Communicating Security Architecture: Boards, Supervisors, Auditors and Engineers, Chapter 27: Conclusions: The Transformed Security Architect.
- Source [75]: Rozanski, N. & Woods, E. (2011). Software Systems Architecture: Working with Stakeholders Using Viewpoints and Perspectives. 2nd edition. Upper Saddle River, NJ: Addison-Wesley. ISBN 978-0-321-71833-4. Available at: https://www.viewpoints-and-perspectives.info/ (accessed 2026-11-06). Referenced in: Chapter 2: What the Security Architect Did: The Role Before the Transformation, Chapter 5: Security Architecture as Code: From Documents to Executable Design, Chapter 19: Communicating Security Architecture: Boards, Supervisors, Auditors and Engineers.
- Source [76]: Brooks, F. P. (1995). The Mythical Man-Month: Essays on Software Engineering. Anniversary edition. Reading, MA: Addison-Wesley. ISBN 978-0-201-83595-3. Referenced in: Chapter 16: The Role Map: CISO, Enterprise Architect, AI Architect, Platform and Product Teams.
- Source [77]: Conway, M. E. (1968). How Do Committees Invent? Datamation, 14(4), pp. 28–31. Available at: https://www.melconway.com/Home/Committees_Paper.html (accessed 2026-10-31). Referenced in: Chapter 4: The Transformed Role Defined: Mandate, Accountabilities and Decision Rights, Chapter 16: The Role Map: CISO, Enterprise Architect, AI Architect, Platform and Product Teams, Chapter 17: Design Authority, Decision Forums and Gates Instead of Meetings, Chapter 24: Case Studies and Anti-Patterns.
- Source [78]: Westrum, R. (2004). A typology of organisational cultures. Quality and Safety in Health Care (now BMJ Quality & Safety), 13(suppl 2), pp. ii22–ii27. Available at: https://doi.org/10.1136/qshc.2003.009522 (accessed 2026-10-31). Referenced in: Chapter 2: What the Security Architect Did: The Role Before the Transformation, Chapter 16: The Role Map: CISO, Enterprise Architect, AI Architect, Platform and Product Teams, Chapter 24: Case Studies and Anti-Patterns.
- Source [79]: Perrow, C. (1984). Normal Accidents: Living with High-Risk Technologies. New York: Basic Books. Referenced in: Chapter 7: Designing Boundaries: Zero Trust and Containment for People, Agents and Machines, Chapter 9: The Control Catalogue, Evidence and Assurance as the Architect's Artefacts, Chapter 11: Resilience and Recovery by Design: The Architect's Share of Recoverability, Chapter 24: Case Studies and Anti-Patterns.
- Source [80]: Humble, J. & Farley, D. (2010). Continuous Delivery: Reliable Software Releases through Build, Test, and Deployment Automation. Upper Saddle River, NJ: Addison-Wesley. ISBN 978-0-321-60191-9. Available at: https://continuousdelivery.com/ (accessed 2026-11-06). Referenced in: Chapter 5: Security Architecture as Code: From Documents to Executable Design, Chapter 14: Verifying What AI Proposes: Review for Soundness When the Reviewer Depends on the AI, Chapter 17: Design Authority, Decision Forums and Gates Instead of Meetings.
- Source [81]: Forsgren, N., Humble, J. & Kim, G. (2018). Accelerate: The Science of Lean Software and DevOps. Portland, OR: IT Revolution Press. ISBN 978-1-942788-33-1. Referenced in: Chapter 2: What the Security Architect Did: The Role Before the Transformation, Chapter 3: Four Shifts: Code, Boundaries, Machine Speed and the AI Team, Chapter 14: Verifying What AI Proposes: Review for Soundness When the Reviewer Depends on the AI, Chapter 17: Design Authority, Decision Forums and Gates Instead of Meetings, Chapter 19: Communicating Security Architecture: Boards, Supervisors, Auditors and Engineers, Chapter 24: Case Studies and Anti-Patterns, Chapter 25: A Year in the Role: The Transformed Architect at Nordvik Region and Hansa Mutual.
- Source [82]: Kim, G., Humble, J., Debois, P. & Willis, J (2016). The DevOps Handbook: How to Create World-Class Agility, Reliability, & Security in Technology Organizations. IT Revolution Press, 2016. ISBN 978-1-942788-00-3. Referenced in: Chapter 2: What the Security Architect Did: The Role Before the Transformation, Chapter 17: Design Authority, Decision Forums and Gates Instead of Meetings.
- Source [83]: Skelton, M. & Pais, M (2019). Team Topologies: Organizing Business and Technology Teams for Fast Flow. IT Revolution Press, 2019. ISBN 978-1-942788-81-2. Second edition: Team Topologies, 2nd Edition: Organizing Business and Technology for Fast Flow of Value, IT Revolution, 23 September 2025, ISBN 978-1-966280-00-2. Referenced in: Chapter 4: The Transformed Role Defined: Mandate, Accountabilities and Decision Rights, Chapter 16: The Role Map: CISO, Enterprise Architect, AI Architect, Platform and Product Teams, Chapter 23: The Future of the Role: Will There Be a Security Architect in 2036?, Chapter 26: Nordvik Region and Hansa Mutual: Conclusions for Two Organisations.
- Source [84]: Nygard, M. T. (2018). Release It! Design and Deploy Production-Ready Software. 2nd edition. Raleigh, NC: The Pragmatic Bookshelf. ISBN 978-1-68050-239-8. Available at: https://pragprog.com/titles/mnee2/release-it-second-edition/ (accessed 2026-11-06). Referenced in: Chapter 11: Resilience and Recovery by Design: The Architect's Share of Recoverability.
- Source [85]: Rosenthal, C. & Jones, N. (2020). Chaos Engineering: System Resiliency in Practice. Sebastopol, CA: O'Reilly Media. ISBN 978-1-492-04386-7. Available at: https://www.oreilly.com/library/view/chaos-engineering/9781492043850/ (accessed 2026-11-06). Referenced in: Chapter 11: Resilience and Recovery by Design: The Architect's Share of Recoverability.
- Source [86]: Basiri, A., Behnam, N., de Rooij, R., Hochstein, L., Kosewski, L., Reynolds, J. & Rosenthal, C. (2016). Chaos Engineering. IEEE Software 33(3), 35–41. Available at: https://doi.org/10.1109/MS.2016.60 (accessed 2026-11-02). Referenced in: Chapter 11: Resilience and Recovery by Design: The Architect's Share of Recoverability.
- Source [87]: Principles of Chaos Engineering community. Principles of Chaos Engineering. Available at: https://principlesofchaos.org/ (accessed 2026-11-02). Referenced in: Chapter 10: Architecting at Machine Speed: Patch Velocity, Detection and the Stop Path by Design, Chapter 11: Resilience and Recovery by Design: The Architect's Share of Recoverability.
- Source [88]: Rinehart, A. & Shortridge, K (2023). Security Chaos Engineering: Developing Resilience and Safety at Speed and Scale. O'Reilly Media, 2023. ISBN 978-1-098-11382-7. Referenced in: Chapter 3: Four Shifts: Code, Boundaries, Machine Speed and the AI Team, Chapter 11: Resilience and Recovery by Design: The Architect's Share of Recoverability, Chapter 25: A Year in the Role: The Transformed Architect at Nordvik Region and Hansa Mutual.
- Source [89]: ISC2 (2024). 2024 ISC2 Cybersecurity Workforce Study. ISC2, October 2024. Available at: https://www.isc2.org/Insights/2024/10/ISC2-2024-Cybersecurity-Workforce-Study (accessed 2026-11-06). Referenced in: Chapter 1: Introduction: The Security Architect Transformed, Chapter 21: Competences of the Transformed Security Architect: A Framework, Chapter 22: Learning Paths, Certification, Hiring and Upskilling, Chapter 23: The Future of the Role: Will There Be a Security Architect in 2036?.
- Source [90]: ISACA (2024). State of Cybersecurity 2024: Survey results. ISACA, October 2024. Available at: https://www.isaca.org/resources/reports/state-of-cybersecurity-2024 (accessed 2026-11-06). Referenced in: Chapter 1: Introduction: The Security Architect Transformed, Chapter 21: Competences of the Transformed Security Architect: A Framework, Chapter 22: Learning Paths, Certification, Hiring and Upskilling.
- Source [91]: ISC2. CISSP-ISSAP: Information Systems Security Architecture Professional. ISC2 certification page. Available at: https://www.isc2.org/certifications/issap (accessed 2026-11-06). Referenced in: Chapter 2: What the Security Architect Did: The Role Before the Transformation, Chapter 21: Competences of the Transformed Security Architect: A Framework, Chapter 22: Learning Paths, Certification, Hiring and Upskilling.
AI in architecture and engineering work: productivity, quality and skills
- Source [92]: Peng, S., Kalliamvakou, E., Cihon, P. & Demirer, M. (2023). The Impact of AI on Developer Productivity: Evidence from GitHub Copilot. arXiv:2302.06590. Available at: https://arxiv.org/abs/2302.06590 (accessed 2026-11-06). Referenced in: Chapter 3: Four Shifts: Code, Boundaries, Machine Speed and the AI Team, Chapter 12: The Architect's Own Use of AI: Drafting, Research and Review in Modes 1 to 3.
- Source [93]: Becker, J., Rush, N., Barnes, E. & Rein, D. (2025). Measuring the Impact of Early-2025 AI on Experienced Open-Source Developer Productivity. METR, arXiv:2507.09089. Available at: https://arxiv.org/abs/2507.09089 (accessed 2026-11-06). Referenced in: Chapter 1: Introduction: The Security Architect Transformed, Chapter 3: Four Shifts: Code, Boundaries, Machine Speed and the AI Team, Chapter 12: The Architect's Own Use of AI: Drafting, Research and Review in Modes 1 to 3, Chapter 15: Keeping the Craft: Deskilling, Judgement and the Architect Who Still Can.
- Source [94]: Cui, Z., Demirer, M., Jaffe, S., Musolff, L., Peng, S. & Salz, T. (2025). The Effects of Generative AI on High-Skilled Work: Evidence from Three Field Experiments with Software Developers. SSRN Working Paper 4945566. Available at: https://doi.org/10.2139/ssrn.4945566 (accessed 2026-11-06). Referenced in: Chapter 12: The Architect's Own Use of AI: Drafting, Research and Review in Modes 1 to 3.
- Source [95]: Dell'Acqua, F. et al. (2023). Navigating the Jagged Technological Frontier: Field Experimental Evidence of the Effects of AI on Knowledge Worker Productivity and Quality. Harvard Business School Technology & Operations Management Unit Working Paper No. 24-013. Available at: https://doi.org/10.2139/ssrn.4573321 (accessed 2026-11-06). Referenced in: Chapter 1: Introduction: The Security Architect Transformed, Chapter 3: Four Shifts: Code, Boundaries, Machine Speed and the AI Team, Chapter 12: The Architect's Own Use of AI: Drafting, Research and Review in Modes 1 to 3, Chapter 15: Keeping the Craft: Deskilling, Judgement and the Architect Who Still Can, Chapter 22: Learning Paths, Certification, Hiring and Upskilling.
- Source [96]: Brynjolfsson, E., Li, D. & Raymond, L. (2025). Generative AI at Work. The Quarterly Journal of Economics, 140(2), 889–942. Available at: https://doi.org/10.1093/qje/qjae044 (accessed 2026-11-02). Referenced in: Chapter 12: The Architect's Own Use of AI: Drafting, Research and Review in Modes 1 to 3, Chapter 15: Keeping the Craft: Deskilling, Judgement and the Architect Who Still Can, Chapter 22: Learning Paths, Certification, Hiring and Upskilling, Chapter 23: The Future of the Role: Will There Be a Security Architect in 2036?.
- Source [97]: DORA (2024). Accelerate State of DevOps Report 2024. Google Cloud / DORA, 2024. Available at: https://dora.dev/research/2024/dora-report/ (accessed 2026-10-30). Referenced in: Chapter 12: The Architect's Own Use of AI: Drafting, Research and Review in Modes 1 to 3.
- Source [98]: Harvey, N. & DeBellis, D. (2025). Announcing the 2025 DORA Report: State of AI-assisted Software Development. Google Cloud Blog, 23 September 2025. Available at: https://cloud.google.com/blog/products/ai-machine-learning/announcing-the-2025-dora-report (accessed 2026-11-01). Referenced in: Chapter 3: Four Shifts: Code, Boundaries, Machine Speed and the AI Team, Chapter 12: The Architect's Own Use of AI: Drafting, Research and Review in Modes 1 to 3, Chapter 23: The Future of the Role: Will There Be a Security Architect in 2036?.
- Source [99]: Storer, K. M. & DeBellis, D. (2025). Introducing DORA's inaugural AI Capabilities Model. Google Cloud Blog, 23 September 2025. Available at: https://cloud.google.com/blog/products/ai-machine-learning/introducing-doras-inaugural-ai-capabilities-model (accessed 2026-11-01). Referenced in: Chapter 12: The Architect's Own Use of AI: Drafting, Research and Review in Modes 1 to 3, Chapter 23: The Future of the Role: Will There Be a Security Architect in 2036?.
- Source [100]: Kwa, T., West, B., Becker, J. et al. (2025). Measuring AI Ability to Complete Long Tasks. METR, arXiv:2503.14499. Available at: https://arxiv.org/abs/2503.14499 (accessed 2026-11-02). Referenced in: Chapter 12: The Architect's Own Use of AI: Drafting, Research and Review in Modes 1 to 3, Chapter 23: The Future of the Role: Will There Be a Security Architect in 2036?, Chapter 24: Case Studies and Anti-Patterns, Chapter 27: Conclusions: The Transformed Security Architect.
- Source [101]: Pearce, H., Ahmad, B., Tan, B., Dolan-Gavitt, B. & Karri, R. (2022). Asleep at the Keyboard? Assessing the Security of GitHub Copilot's Code Contributions. 2022 IEEE Symposium on Security and Privacy, 754–768. arXiv:2108.09293. Available at: https://arxiv.org/abs/2108.09293 (accessed 2026-11-06). Referenced in: Chapter 12: The Architect's Own Use of AI: Drafting, Research and Review in Modes 1 to 3.
- Source [102]: Perry, N., Srivastava, M., Kumar, D. & Boneh, D. (2023). Do Users Write More Insecure Code with AI Assistants? Proceedings of the 2023 ACM SIGSAC Conference on Computer and Communications Security (CCS '23). arXiv:2211.03622. Available at: https://arxiv.org/abs/2211.03622 (accessed 2026-11-06). Referenced in: Chapter 1: Introduction: The Security Architect Transformed, Chapter 12: The Architect's Own Use of AI: Drafting, Research and Review in Modes 1 to 3, Chapter 14: Verifying What AI Proposes: Review for Soundness When the Reviewer Depends on the AI.
- Source [103]: Veracode (2025). 2025 GenAI Code Security Report. Veracode, July 2025. Available at: https://www.veracode.com/resources/analyst-reports/2025-genai-code-security-report/ (accessed 2026-11-06). Referenced in: Chapter 12: The Architect's Own Use of AI: Drafting, Research and Review in Modes 1 to 3.
- Source [104]: Brombacher, F. (2026). Spring 2026 GenAI Code Security Update: Despite Claims, AI Models Are Still Failing Security. Veracode, 24 March 2026. Available at: https://www.veracode.com/?p=28620 (accessed 2026-11-01). Referenced in: Chapter 12: The Architect's Own Use of AI: Drafting, Research and Review in Modes 1 to 3.
- Source [105]: Von Arx, S., Chan, L. & Barnes, B. (2025). Recent Frontier Models Are Reward Hacking. METR, 5 June 2025. Available at: https://metr.org/blog/2025-06-05-recent-reward-hacking/ (accessed 2026-11-01). Referenced in: Chapter 7: Designing Boundaries: Zero Trust and Containment for People, Agents and Machines, Chapter 12: The Architect's Own Use of AI: Drafting, Research and Review in Modes 1 to 3, Chapter 14: Verifying What AI Proposes: Review for Soundness When the Reviewer Depends on the AI.
- Source [106]: Bainbridge, L. (1983). Ironies of automation. Automatica, 19(6), 775–779. Available at: https://doi.org/10.1016/0005-1098(83)90046-8 (accessed 2026-11-02). Referenced in: Chapter 1: Introduction: The Security Architect Transformed, Chapter 3: Four Shifts: Code, Boundaries, Machine Speed and the AI Team, Chapter 11: Resilience and Recovery by Design: The Architect's Share of Recoverability, Chapter 14: Verifying What AI Proposes: Review for Soundness When the Reviewer Depends on the AI, Chapter 15: Keeping the Craft: Deskilling, Judgement and the Architect Who Still Can, Chapter 17: Design Authority, Decision Forums and Gates Instead of Meetings, Chapter 21: Competences of the Transformed Security Architect: A Framework, Chapter 23: The Future of the Role: Will There Be a Security Architect in 2036?, Chapter 24: Case Studies and Anti-Patterns, Chapter 26: Nordvik Region and Hansa Mutual: Conclusions for Two Organisations, Chapter 27: Conclusions: The Transformed Security Architect.
- Source [107]: Parasuraman, R. & Manzey, D. H. (2010). Complacency and Bias in Human Use of Automation: An Attentional Integration. Human Factors, 52(3), 381–410. Available at: https://doi.org/10.1177/0018720810376055 (accessed 2026-11-06). Referenced in: Chapter 1: Introduction: The Security Architect Transformed, Chapter 3: Four Shifts: Code, Boundaries, Machine Speed and the AI Team, Chapter 6: Threat Modelling Transformed: Continuous, Generated and AI-Assisted, Chapter 12: The Architect's Own Use of AI: Drafting, Research and Review in Modes 1 to 3, Chapter 14: Verifying What AI Proposes: Review for Soundness When the Reviewer Depends on the AI, Chapter 15: Keeping the Craft: Deskilling, Judgement and the Architect Who Still Can, Chapter 17: Design Authority, Decision Forums and Gates Instead of Meetings, Chapter 19: Communicating Security Architecture: Boards, Supervisors, Auditors and Engineers, Chapter 21: Competences of the Transformed Security Architect: A Framework, Chapter 22: Learning Paths, Certification, Hiring and Upskilling, Chapter 23: The Future of the Role: Will There Be a Security Architect in 2036?, Chapter 24: Case Studies and Anti-Patterns, Chapter 26: Nordvik Region and Hansa Mutual: Conclusions for Two Organisations, Chapter 27: Conclusions: The Transformed Security Architect.
- Source [108]: Ericsson, K. A., Krampe, R. T. & Tesch-Römer, C. (1993). The Role of Deliberate Practice in the Acquisition of Expert Performance. Psychological Review, 100(3), 363–406. Available at: https://doi.org/10.1037/0033-295X.100.3.363 (accessed 2026-11-06). Referenced in: Chapter 15: Keeping the Craft: Deskilling, Judgement and the Architect Who Still Can, Chapter 21: Competences of the Transformed Security Architect: A Framework, Chapter 22: Learning Paths, Certification, Hiring and Upskilling.
- Source [109]: Kahneman, D. & Klein, G. (2009). Conditions for Intuitive Expertise: A Failure to Disagree. American Psychologist, 64(6), 515–526. Available at: https://doi.org/10.1037/a0016755 (accessed 2026-11-06). Referenced in: Chapter 14: Verifying What AI Proposes: Review for Soundness When the Reviewer Depends on the AI, Chapter 15: Keeping the Craft: Deskilling, Judgement and the Architect Who Still Can, Chapter 21: Competences of the Transformed Security Architect: A Framework, Chapter 22: Learning Paths, Certification, Hiring and Upskilling.
- Source [110]: Risko, E. F. & Gilbert, S. J. (2016). Cognitive Offloading. Trends in Cognitive Sciences, 20(9), 676–688. Available at: https://doi.org/10.1016/j.tics.2016.07.002 (accessed 2026-11-02). Referenced in: Chapter 14: Verifying What AI Proposes: Review for Soundness When the Reviewer Depends on the AI, Chapter 15: Keeping the Craft: Deskilling, Judgement and the Architect Who Still Can.
- Source [111]: Lee, H.-P., Sarkar, A., Tankelevitch, L., Drosos, I., Rintel, S., Banks, R. & Wilson, N. (2025). The Impact of Generative AI on Critical Thinking: Self-Reported Reductions in Cognitive Effort and Confidence Effects From a Survey of Knowledge Workers. Proceedings of the 2025 CHI Conference on Human Factors in Computing Systems. Available at: https://doi.org/10.1145/3706598.3713778 (accessed 2026-11-02). Referenced in: Chapter 3: Four Shifts: Code, Boundaries, Machine Speed and the AI Team, Chapter 12: The Architect's Own Use of AI: Drafting, Research and Review in Modes 1 to 3, Chapter 14: Verifying What AI Proposes: Review for Soundness When the Reviewer Depends on the AI, Chapter 15: Keeping the Craft: Deskilling, Judgement and the Architect Who Still Can, Chapter 22: Learning Paths, Certification, Hiring and Upskilling.
- Source [112]: Kosmyna, N., Hauptmann, E., Yuan, Y. T., Situ, J., Liao, X.-H., Beresnitzky, A. V., Braunstein, I. & Maes, P. (2025). Your Brain on ChatGPT: Accumulation of Cognitive Debt when Using an AI Assistant for Essay Writing Task. arXiv:2506.08872. Available at: https://arxiv.org/abs/2506.08872 (accessed 2026-11-02). Referenced in: Chapter 15: Keeping the Craft: Deskilling, Judgement and the Architect Who Still Can.
- Source [113]: Gerlich, M. (2025). AI Tools in Society: Impacts on Cognitive Offloading and the Future of Critical Thinking. Societies, 15(1), 6. Available at: https://doi.org/10.3390/soc15010006 (accessed 2026-11-02). Referenced in: Chapter 15: Keeping the Craft: Deskilling, Judgement and the Architect Who Still Can.
- Source [114]: Bastani, H., Bastani, O., Sungu, A., Ge, H., Kabakcı, Ö. & Mariman, R. (2025). Generative AI without guardrails can harm learning: Evidence from high school mathematics. Proceedings of the National Academy of Sciences, 122(26). Available at: https://doi.org/10.1073/pnas.2422633122 (accessed 2026-11-02). Referenced in: Chapter 15: Keeping the Craft: Deskilling, Judgement and the Architect Who Still Can, Chapter 22: Learning Paths, Certification, Hiring and Upskilling.
- Source [115]: Anthropic (2024). Building effective agents. Anthropic research blog, 19 December 2024. Available at: https://www.anthropic.com/research/building-effective-agents (accessed 2026-10-31). Referenced in: Chapter 13: An AI Agent Team for Security Architecture: Skills, Mandates and Containment.
- Source [116]: OpenAI (2025). A practical guide to building agents. OpenAI, April 2025. Available at: https://cdn.openai.com/business-guides-and-resources/a-practical-guide-to-building-agents.pdf (accessed 2026-11-06). Referenced in: Chapter 13: An AI Agent Team for Security Architecture: Skills, Mandates and Containment.
- Source [117]: Microsoft AI Red Team (2025). Taxonomy of Failure Modes in Agentic AI Systems. Microsoft, April 2025. Available at: https://www.microsoft.com/en-us/security/blog/2025/04/24/new-whitepaper-outlines-the-taxonomy-of-failure-modes-in-ai-agents/ (accessed 2026-11-06). Referenced in: Chapter 6: Threat Modelling Transformed: Continuous, Generated and AI-Assisted, Chapter 13: An AI Agent Team for Security Architecture: Skills, Mandates and Containment.
- Source [118]: Anthropic (2025). Introducing Agent Skills. Claude blog, 16 October 2025, updated 18 December 2025. Available at: https://claude.com/blog/skills (accessed 2026-11-01). Referenced in: Chapter 12: The Architect's Own Use of AI: Drafting, Research and Review in Modes 1 to 3, Chapter 13: An AI Agent Team for Security Architecture: Skills, Mandates and Containment, Chapter 16: The Role Map: CISO, Enterprise Architect, AI Architect, Platform and Product Teams.
- Source [119]: AGENTS.md Contributors. AGENTS.md: a simple, open format for guiding coding agents. Available at: https://agents.md/ (accessed 2026-11-01). Referenced in: Chapter 12: The Architect's Own Use of AI: Drafting, Research and Review in Modes 1 to 3, Chapter 13: An AI Agent Team for Security Architecture: Skills, Mandates and Containment.
- Source [120]: Anthropic. Configure permissions and Configure the sandboxed Bash tool. Claude Code documentation, living page. Available at: https://code.claude.com/docs/en/permissions; https://code.claude.com/docs/en/sandboxing (accessed 2026-11-01). Referenced in: Chapter 7: Designing Boundaries: Zero Trust and Containment for People, Agents and Machines, Chapter 12: The Architect's Own Use of AI: Drafting, Research and Review in Modes 1 to 3, Chapter 17: Design Authority, Decision Forums and Gates Instead of Meetings.
- Source [121]: OpenAI. Agent approvals & security. Codex documentation, living page. Available at: https://learn.chatgpt.com/docs/agent-approvals-security (accessed 2026-11-01). Referenced in: Chapter 12: The Architect's Own Use of AI: Drafting, Research and Review in Modes 1 to 3, Chapter 17: Design Authority, Decision Forums and Gates Instead of Meetings.
- Source [122]: Lynch, A., Wright, B., Larson, C., Troy, K. K., Ritchie, S. J., Mindermann, S., Perez, E. & Hubinger, E. (2025). Agentic Misalignment: How LLMs could be insider threats. Anthropic, 20 June 2025; arXiv:2510.05179. Available at: https://www.anthropic.com/research/agentic-misalignment (accessed 2026-11-01). Referenced in: Chapter 7: Designing Boundaries: Zero Trust and Containment for People, Agents and Machines, Chapter 13: An AI Agent Team for Security Architecture: Skills, Mandates and Containment.
- Source [123]: Greshake, K., Abdelnabi, S., Mishra, S., Endres, C., Holz, T. & Fritz, M. (2023). Not what you've signed up for: Compromising Real-World LLM-Integrated Applications with Indirect Prompt Injection. Proceedings of the 16th ACM Workshop on Artificial Intelligence and Security (AISec '23). Available at: https://arxiv.org/abs/2302.12173 (accessed 2026-10-31). Referenced in: Chapter 6: Threat Modelling Transformed: Continuous, Generated and AI-Assisted.
- Source [124]: Willison, S. (2025). The lethal trifecta for AI agents: private data, untrusted content, and external communication. Simon Willison's Weblog, 16 June 2025. Available at: https://simonwillison.net/2025/Jun/16/the-lethal-trifecta/ (accessed 2026-11-06). Referenced in: Chapter 6: Threat Modelling Transformed: Continuous, Generated and AI-Assisted, Chapter 7: Designing Boundaries: Zero Trust and Containment for People, Agents and Machines, Chapter 13: An AI Agent Team for Security Architecture: Skills, Mandates and Containment.
- Source [125]: Reddy, P. & Gujral, A. S. (2025). EchoLeak: The First Real-World Zero-Click Prompt Injection Exploit in a Production LLM System. arXiv:2509.10540, AAAI Fall Symposium Series 2025. Available at: https://arxiv.org/abs/2509.10540 (accessed 2026-11-01). Referenced in: Chapter 6: Threat Modelling Transformed: Continuous, Generated and AI-Assisted.
- Source [126]: Milanta, M. & Beurer-Kellner, L. (2025). GitHub MCP Exploited: Accessing private repositories via MCP. Invariant Labs, 26 May 2025. Available at: https://invariantlabs.ai/blog/mcp-github-vulnerability (accessed 2026-11-01). Referenced in: Chapter 6: Threat Modelling Transformed: Continuous, Generated and AI-Assisted, Chapter 13: An AI Agent Team for Security Architecture: Skills, Mandates and Containment, Chapter 24: Case Studies and Anti-Patterns.
- Source [127]: Khan, A. (2026). Clinejection — Compromising Cline's Production Releases just by Prompting an Issue Triager. 9 February 2026, updated 18 February 2026. Available at: https://adnanthekhan.com/posts/clinejection/ (accessed 2026-11-01). Referenced in: Chapter 13: An AI Agent Team for Security Architecture: Skills, Mandates and Containment, Chapter 24: Case Studies and Anti-Patterns.
- Source [128]: Bengio, Y. et al. (2026). International AI Safety Report 2026. International AI Safety Report, 3 February 2026. Available at: https://internationalaisafetyreport.org/publication/international-ai-safety-report-2026 (accessed 2026-11-01). Referenced in: Chapter 1: Introduction: The Security Architect Transformed, Chapter 23: The Future of the Role: Will There Be a Security Architect in 2036?, Chapter 27: Conclusions: The Transformed Security Architect.
Incidents, threat reporting and machine speed
- Source [129]: OpenAI (2026). OpenAI – Hugging Face Incident Technical Report. 26 August 2026. Available at: https://cdn.openai.com/pdf/67869394-cb91-4c12-888c-5cbd85c7814c/OpenAI-Hugging-Face%20Incident-Technical-Report.pdf (accessed 2026-11-01). Referenced in: Chapter 1: Introduction: The Security Architect Transformed, Chapter 3: Four Shifts: Code, Boundaries, Machine Speed and the AI Team, Chapter 7: Designing Boundaries: Zero Trust and Containment for People, Agents and Machines, Chapter 8: Identity Architecture for Non-Human Actors: Workloads, Agents and Delegated Authority, Chapter 23: The Future of the Role: Will There Be a Security Architect in 2036?, Chapter 24: Case Studies and Anti-Patterns, Chapter 27: Conclusions: The Transformed Security Architect.
- Source [130]: Larcher, H., Carreira, A. et al. (2026). Anatomy of a Frontier Lab Agent Intrusion: A Technical Timeline of the July 2026 Incident. Hugging Face blog, 27 July 2026. Available at: https://huggingface.co/blog/agent-intrusion-technical-timeline (accessed 2026-11-01). Referenced in: Chapter 1: Introduction: The Security Architect Transformed, Chapter 3: Four Shifts: Code, Boundaries, Machine Speed and the AI Team, Chapter 8: Identity Architecture for Non-Human Actors: Workloads, Agents and Delegated Authority, Chapter 24: Case Studies and Anti-Patterns.
- Source [131]: Wijk, H., Cotra, A. & Greenblatt, R. (2026). Brief independent investigation of agents' behavior, reasoning and collaboration in the OpenAI / Hugging Face hacking incident. METR, 26 August 2026; Greenblatt of Redwood Research contracted with METR. Available at: https://metr.org/blog/2026-08-26-openai-hugging-face-incident-investigation/; PDF https://metr.org/hugging-face-incident-report-aug-2026.pdf (accessed 2026-11-01). Referenced in: Chapter 24: Case Studies and Anti-Patterns.
- Source [132]: Satter, R., Seetharaman, D. & Cai, K. (2026). Exclusive: Its AI agent spent days hacking a company, but sources say OpenAI did not notice for a week. Reuters, 24 July 2026 (syndicated by The Star). Available at: https://www.thestar.com.my/tech/tech-news/2026/07/25/exclusive-its-ai-agent-spent-days-hacking-a-company-but-sources-say-openai-did-not-notice-for-a-week (accessed 2026-11-01). Referenced in: Chapter 1: Introduction: The Security Architect Transformed, Chapter 10: Architecting at Machine Speed: Patch Velocity, Detection and the Stop Path by Design, Chapter 24: Case Studies and Anti-Patterns.
- Source [133]: AI Security Institute (2026). Incident Report: unsanctioned agent behaviour during cyber testing. UK AISI, 4 August 2026. Available at: https://www.aisi.gov.uk/blog/incident-report-unsanctioned-agent-behaviour-during-cyber-testing (accessed 2026-11-01). Referenced in: Chapter 7: Designing Boundaries: Zero Trust and Containment for People, Agents and Machines, Chapter 24: Case Studies and Anti-Patterns.
- Source [134]: National Cyber Security Centre (2026). NCSC statement in response to recent incidents resulting from frontier AI evaluations. 4 August 2026. Available at: https://www.ncsc.gov.uk/news/ncsc-statement-in-response-to-recent-incidents-resulting-from-frontier-ai-evaluations (accessed 2026-11-01). Referenced in: Chapter 7: Designing Boundaries: Zero Trust and Containment for People, Agents and Machines.
- Source [135]: AI Security Institute (2026). GPT-6 Astra performs unsanctioned supply-chain attacks in simulations. UK AISI, 28 September 2026. Available at: https://www.aisi.gov.uk/blog/gpt-6-astra-performs-unsanctioned-supply-chain-attacks-in-simulations (accessed 2026-11-01). Referenced in: Chapter 7: Designing Boundaries: Zero Trust and Containment for People, Agents and Machines.
- Source [136]: Nolan, B. (2025). An AI-powered coding tool wiped out a software company's database, then apologized for a 'catastrophic failure on my part'. Fortune, 23 July 2025. Available at: https://fortune.com/2025/07/23/ai-coding-tool-replit-wiped-database-called-it-a-catastrophic-failure/ (accessed 2026-11-01). Referenced in: Chapter 7: Designing Boundaries: Zero Trust and Containment for People, Agents and Machines, Chapter 24: Case Studies and Anti-Patterns.
- Source [137]: Five Eyes cyber security agencies: ASD's ACSC, Canadian Centre for Cyber Security, NCSC-NZ, NCSC-UK, NSA and CISA (2026). The AI shift in cyber risk: why leaders must act now. Joint statement, 22 June 2026. Available at: https://www.ncsc.gov.uk/sites/default/files/2026-06/Five-Eyes-cyber-security-agencies-statement-ai-shift.pdf (accessed 2026-11-01). Referenced in: Chapter 1: Introduction: The Security Architect Transformed, Chapter 3: Four Shifts: Code, Boundaries, Machine Speed and the AI Team, Chapter 23: The Future of the Role: Will There Be a Security Architect in 2036?.
- Source [138]: Five Eyes cyber security agencies: ASD's ACSC, CISA, NSA, Canadian Centre for Cyber Security, NCSC-NZ and NCSC-UK (2026). Careful adoption of agentic AI services. Joint guidance, 1 May 2026. Available at: https://www.ncsc.govt.nz/assets/guidance/Documents/Careful-adoption-of-agentic-AI-services_FINAL.pdf (accessed 2026-11-01). Referenced in: Chapter 3: Four Shifts: Code, Boundaries, Machine Speed and the AI Team, Chapter 7: Designing Boundaries: Zero Trust and Containment for People, Agents and Machines, Chapter 8: Identity Architecture for Non-Human Actors: Workloads, Agents and Delegated Authority, Chapter 13: An AI Agent Team for Security Architecture: Skills, Mandates and Containment.
- Source [139]: National Cyber Security Centre (2025). Impact of AI on cyber threat from now to 2027. NCSC Assessment, 7 May 2025. Available at: https://www.ncsc.gov.uk/report/impact-ai-cyber-threat-now-2027 (accessed 2026-11-01). Referenced in: Chapter 10: Architecting at Machine Speed: Patch Velocity, Detection and the Stop Path by Design.
- Source [140]: National Cyber Security Centre (2026). Preparing for a 'vulnerability patch wave'. NCSC blog, 1 May 2026. Available at: https://www.ncsc.gov.uk/blogs/prepare-for-vulnerability-patch-wave (accessed 2026-11-01). Referenced in: Chapter 3: Four Shifts: Code, Boundaries, Machine Speed and the AI Team, Chapter 10: Architecting at Machine Speed: Patch Velocity, Detection and the Stop Path by Design, Chapter 17: Design Authority, Decision Forums and Gates Instead of Meetings, Chapter 19: Communicating Security Architecture: Boards, Supervisors, Auditors and Engineers, Chapter 23: The Future of the Role: Will There Be a Security Architect in 2036?, Chapter 24: Case Studies and Anti-Patterns.
- Source [141]: European Union Agency for Cybersecurity (2026). ENISA Threat Landscape 2026. September 2026. Available at: https://www.enisa.europa.eu/sites/default/files/2026-09/ENISA%20Threat%20Landscape%202026_Final.pdf (accessed 2026-11-01). Referenced in: Chapter 1: Introduction: The Security Architect Transformed.
- Source [142]: Mandiant (2026). M-Trends 2026: Data, Insights, and Strategies From the Frontlines. Google Cloud Blog, 23 March 2026. Available at: https://cloud.google.com/blog/topics/threat-intelligence/m-trends-2026 (accessed 2026-11-01). Referenced in: Chapter 3: Four Shifts: Code, Boundaries, Machine Speed and the AI Team, Chapter 10: Architecting at Machine Speed: Patch Velocity, Detection and the Stop Path by Design, Chapter 23: The Future of the Role: Will There Be a Security Architect in 2036?, Chapter 27: Conclusions: The Transformed Security Architect.
- Source [143]: Charrier, C. & Weiner, R. (2024). How Low Can You Go? An Analysis of 2023 Time-to-Exploit Trends. Mandiant, Google Cloud Blog, 15 October 2024. Available at: https://cloud.google.com/blog/topics/threat-intelligence/time-to-exploit-trends-2023 (accessed 2026-11-01). Referenced in: Chapter 2: What the Security Architect Did: The Role Before the Transformation, Chapter 3: Four Shifts: Code, Boundaries, Machine Speed and the AI Team, Chapter 10: Architecting at Machine Speed: Patch Velocity, Detection and the Stop Path by Design.
- Source [144]: Google Threat Intelligence Group (2026). GTIG AI Threat Tracker: From Prompting to Autonomy – The Evolution of Adversarial AI. Google Cloud Blog, 8 September 2026. Available at: https://cloud.google.com/blog/topics/threat-intelligence/from-prompting-to-autonomy-the-evolution-of-adversarial-ai (accessed 2026-11-01). Referenced in: Chapter 23: The Future of the Role: Will There Be a Security Architect in 2036?.
- Source [145]: Grunewald, R., Mazumdar, S. & Vanderlee, K. (2026). Vulnerability Discovery and Exploitation Trends in the AI Era. Google Threat Intelligence Group, Google Cloud Blog, 30 September 2026. Available at: https://cloud.google.com/blog/topics/threat-intelligence/vulnerability-discovery-and-exploitation-trends-in-the-ai-era (accessed 2026-11-01). Referenced in: Chapter 3: Four Shifts: Code, Boundaries, Machine Speed and the AI Team, Chapter 10: Architecting at Machine Speed: Patch Velocity, Detection and the Stop Path by Design.
- Source [146]: Blum, Mainor, Nambiar et al. (2026). ARTEX and Friends: Enter Agentic Offensive Frameworks. Google Threat Intelligence Group and Mandiant, Google Cloud Blog, 30 October 2026. Available at: https://cloud.google.com/blog/topics/threat-intelligence/artex-and-friends-enter-agentic-offensive-frameworks (accessed 2026-11-01). Referenced in: Chapter 10: Architecting at Machine Speed: Patch Velocity, Detection and the Stop Path by Design.
- Source [147]: Big Sleep team, Google Project Zero and Google DeepMind (2024). From Naptime to Big Sleep: Using Large Language Models To Catch Vulnerabilities In Real-World Code. Project Zero blog, 1 November 2024. Available at: https://projectzero.google/2024/10/from-naptime-to-big-sleep.html (accessed 2026-11-01). Referenced in: Chapter 10: Architecting at Machine Speed: Patch Velocity, Detection and the Stop Path by Design.
- Source [148]: Defense Advanced Research Projects Agency (2025). AI Cyber Challenge marks pivotal inflection point for cyber defense. DARPA, 8 August 2025. Available at: https://www.darpa.mil/news/2025/aixcc-results (accessed 2026-11-01). Referenced in: Chapter 10: Architecting at Machine Speed: Patch Velocity, Detection and the Stop Path by Design.
- Source [149]: Carlini, N., Cheng, N., Lucas, K. et al. (2026). Assessing Claude Mythos Preview's cybersecurity capabilities. Anthropic Frontier Red Team, 7 April 2026. Available at: https://www.anthropic.com/research/mythos-preview (accessed 2026-11-01). Referenced in: Chapter 10: Architecting at Machine Speed: Patch Velocity, Detection and the Stop Path by Design, Chapter 23: The Future of the Role: Will There Be a Security Architect in 2036?.
- Source [150]: Anthropic (2026). Project Glasswing: Securing critical software for the AI era. 7 April 2026, updated 6 October 2026. Available at: https://www.anthropic.com/glasswing (accessed 2026-11-01). Referenced in: Chapter 10: Architecting at Machine Speed: Patch Velocity, Detection and the Stop Path by Design.
- Source [151]: Forum of Incident Response and Security Teams. Exploit Prediction Scoring System (EPSS). FIRST; academic basis Jacobs, J. et al. (2021), Digital Threats: Research and Practice 2(3), https://doi.org/10.1145/3436242. Available at: https://www.first.org/epss/ (accessed 2026-11-01). Referenced in: Chapter 10: Architecting at Machine Speed: Patch Velocity, Detection and the Stop Path by Design, Chapter 19: Communicating Security Architecture: Boards, Supervisors, Auditors and Engineers.
- Source [152]: Cybersecurity and Infrastructure Security Agency. Known Exploited Vulnerabilities Catalog. CISA. Available at: https://www.cisa.gov/known-exploited-vulnerabilities-catalog (accessed 2026-11-01). Referenced in: Chapter 10: Architecting at Machine Speed: Patch Velocity, Detection and the Stop Path by Design, Chapter 19: Communicating Security Architecture: Boards, Supervisors, Auditors and Engineers.
- Source [153]: European Union Agency for Cybersecurity (2025). European Vulnerability Database (EUVD). Launched 13 May 2025 under the NIS 2 Directive. Available at: https://euvd.enisa.europa.eu/ (accessed 2026-11-01). Referenced in: Chapter 10: Architecting at Machine Speed: Patch Velocity, Detection and the Stop Path by Design, Chapter 19: Communicating Security Architecture: Boards, Supervisors, Auditors and Engineers.
- Source [154]: Magramo, K. (2024). Arup revealed as victim of $25 million deepfake scam involving Hong Kong employee. CNN Business, 16 May 2024. Available at: https://edition.cnn.com/2024/05/16/tech/arup-deepfake-scam-loss-hong-kong-intl-hnk (accessed 2026-11-01). Referenced in: Chapter 8: Identity Architecture for Non-Human Actors: Workloads, Agents and Delegated Authority.
Public sector, procurement and digital sovereignty
- Source [155]: European Commission (2023). EU model contractual AI clauses to pilot in procurements of AI. Public Buyers Community, Procurement of AI community, 2023 (updated 2025). Available at: https://public-buyers-community.ec.europa.eu/communities/procurement-ai/resources/eu-model-contractual-ai-clauses-pilot-procurements-ai (accessed 2026-10-31). Referenced in: Chapter 20: Public Authorities and Multinationals: Sovereignty, Procurement and Many Legal Regimes.
- Source [156]: Agency for Digital Government and Swedish Authority for Privacy Protection (2025). Inför en AI-policy (Introducing an AI policy), part of the national guidelines for the use of generative AI in public administration. Digg, published January 2025, updated 3 June 2026. Available at: https://www.digg.se/ai-for-offentlig-forvaltning/riktlinjer-for-generativ-ai/infor-en-ai-policy (accessed 2026-11-01). Referenced in: Chapter 20: Public Authorities and Multinationals: Sovereignty, Procurement and Many Legal Regimes.
- Source [157]: Gaia-X European Association for Data and Cloud AISBL. Gaia-X: A Federated Secure Data Infrastructure. Available at: https://gaia-x.eu/ (accessed 2026-10-31). Referenced in: Chapter 20: Public Authorities and Multinationals: Sovereignty, Procurement and Many Legal Regimes.
- Source [158]: European Commission (2026). Proposal for a Cloud and AI Development Act (CADA). COM(2026) 502, 3 June 2026. Available at: https://digital-strategy.ec.europa.eu/en/library/proposal-cloud-and-ai-development-act-cada (accessed 2026-11-01). Referenced in: Chapter 20: Public Authorities and Multinationals: Sovereignty, Procurement and Many Legal Regimes.
- Source [159]: European Union Agency for Cybersecurity (2020). EUCS – Cloud Services Scheme: candidate EU cybersecurity certification scheme for cloud services. ENISA, December 2020. Available at: https://www.enisa.europa.eu/publications/eucs-cloud-service-scheme (accessed 2026-11-06). Referenced in: Chapter 20: Public Authorities and Multinationals: Sovereignty, Procurement and Many Legal Regimes.
- Source [160]: ANSSI (2022). Prestataires de services d'informatique en nuage (SecNumCloud): référentiel d'exigences, version 3.2. Agence nationale de la sécurité des systèmes d'information, 8 March 2022. Available at: https://cyber.gouv.fr/publications/referentiel-secnumcloud (accessed 2026-11-06). Referenced in: Chapter 20: Public Authorities and Multinationals: Sovereignty, Procurement and Many Legal Regimes.
- Source [161]: BSI (2020). Cloud Computing Compliance Criteria Catalogue – C5:2020. Bundesamt für Sicherheit in der Informationstechnik (Federal Office for Information Security), 2020. Available at: https://www.bsi.bund.de/EN/Themen/Unternehmen-und-Organisationen/Informationen-und-Empfehlungen/Empfehlungen-nach-Angriffszielen/Cloud-Computing/Kriterienkatalog-C5/kriterienkatalog-c5_node.html (accessed 2026-11-06). Referenced in: Chapter 9: The Control Catalogue, Evidence and Assurance as the Architect's Artefacts, Chapter 20: Public Authorities and Multinationals: Sovereignty, Procurement and Many Legal Regimes.
- Source [162]: BSI (2023). IT-Grundschutz Compendium, Edition 2023. Bundesamt für Sicherheit in der Informationstechnik (Federal Office for Information Security), 2023. Available at: https://www.bsi.bund.de/EN/Themen/Unternehmen-und-Organisationen/Standards-und-Zertifizierung/IT-Grundschutz/IT-Grundschutz-Kompendium/it-grundschutz-kompendium_node.html (accessed 2026-11-06). Referenced in: Chapter 9: The Control Catalogue, Evidence and Assurance as the Architect's Artefacts.
- Source [163]: Rijksoverheid (2026). Strengere regels voor het gebruik van clouddiensten door de Rijksoverheid. Ministerie van Economische Zaken en Klimaat, 3 July 2026. Available at: https://www.rijksoverheid.nl/actueel/nieuws/2026/07/03/strengere-regels-voor-het-gebruik-van-clouddiensten-door-de-rijksoverheid (accessed 2026-11-01). Referenced in: Chapter 20: Public Authorities and Multinationals: Sovereignty, Procurement and Many Legal Regimes.
- Source [164]: Regeringskansliet (2026). Ny molnpolicy ska bidra till ökad digital suveränitet i offentlig förvaltning. Finansdepartementet, 28 May 2026, with the policy En molnpolicy för Sverige. Available at: https://regeringen.se/pressmeddelanden/2026/05/ny-molnpolicy-ska-bidra-till-okad-digital-suveranitet-i-offentlig-forvaltning/ (accessed 2026-11-01). Referenced in: Chapter 20: Public Authorities and Multinationals: Sovereignty, Procurement and Many Legal Regimes.
- Source [165]: Amazon (2026). AWS Launches AWS European Sovereign Cloud and Announces Expansion Across Europe. Amazon press release, 15 January 2026. Available at: https://press.aboutamazon.com/aws/2026/1/aws-launches-aws-european-sovereign-cloud-and-announces-expansion-across-europe (accessed 2026-11-01). Referenced in: Chapter 20: Public Authorities and Multinationals: Sovereignty, Procurement and Many Legal Regimes.
- Source [166]: United States Congress (2018). 18 U.S.C. § 2713, Required preservation and disclosure of communications and records (CLOUD Act, enacted 23 March 2018 as Division V of the Consolidated Appropriations Act 2018). Legal Information Institute, Cornell Law School. Available at: https://www.law.cornell.edu/uscode/text/18/2713 (accessed 2026-11-01). Referenced in: Chapter 20: Public Authorities and Multinationals: Sovereignty, Procurement and Many Legal Regimes.
The Architecture as Code Series and the author
- Source [167]: Nordqvist, G. (2025). Architecture as Code. The Architecture as Code Series, Book 1, published at aac.geon.se. Available at: https://aac.geon.se/ (accessed 2026-10-31). Referenced in: Chapter 1: Introduction: The Security Architect Transformed, Chapter 2: What the Security Architect Did: The Role Before the Transformation, Chapter 3: Four Shifts: Code, Boundaries, Machine Speed and the AI Team, Chapter 4: The Transformed Role Defined: Mandate, Accountabilities and Decision Rights, Chapter 5: Security Architecture as Code: From Documents to Executable Design, Chapter 6: Threat Modelling Transformed: Continuous, Generated and AI-Assisted, Chapter 9: The Control Catalogue, Evidence and Assurance as the Architect's Artefacts, Chapter 10: Architecting at Machine Speed: Patch Velocity, Detection and the Stop Path by Design, Chapter 11: Resilience and Recovery by Design: The Architect's Share of Recoverability, Chapter 12: The Architect's Own Use of AI: Drafting, Research and Review in Modes 1 to 3, Chapter 13: An AI Agent Team for Security Architecture: Skills, Mandates and Containment, Chapter 14: Verifying What AI Proposes: Review for Soundness When the Reviewer Depends on the AI, Chapter 15: Keeping the Craft: Deskilling, Judgement and the Architect Who Still Can, Chapter 16: The Role Map: CISO, Enterprise Architect, AI Architect, Platform and Product Teams, Chapter 17: Design Authority, Decision Forums and Gates Instead of Meetings, Chapter 18: Regulation as Constraint: AI Act, NIS 2, DORA, CRA and the Architect's Accountability, Chapter 19: Communicating Security Architecture: Boards, Supervisors, Auditors and Engineers, Chapter 20: Public Authorities and Multinationals: Sovereignty, Procurement and Many Legal Regimes, Chapter 21: Competences of the Transformed Security Architect: A Framework, Chapter 22: Learning Paths, Certification, Hiring and Upskilling, Chapter 24: Case Studies and Anti-Patterns, Chapter 25: A Year in the Role: The Transformed Architect at Nordvik Region and Hansa Mutual, Chapter 26: Nordvik Region and Hansa Mutual: Conclusions for Two Organisations, Chapter 27: Conclusions: The Transformed Security Architect, About the Author.
- Source [168]: Nordqvist, G. (2026). AI Governance: Governing Artificial Intelligence in European Enterprises and Public Authorities. The Architecture as Code Series, Book 2, published at aig.geon.se. Available at: https://aig.geon.se/ (accessed 2026-11-01). Referenced in: Chapter 1: Introduction: The Security Architect Transformed, Chapter 2: What the Security Architect Did: The Role Before the Transformation, Chapter 3: Four Shifts: Code, Boundaries, Machine Speed and the AI Team, Chapter 4: The Transformed Role Defined: Mandate, Accountabilities and Decision Rights, Chapter 7: Designing Boundaries: Zero Trust and Containment for People, Agents and Machines, Chapter 8: Identity Architecture for Non-Human Actors: Workloads, Agents and Delegated Authority, Chapter 9: The Control Catalogue, Evidence and Assurance as the Architect's Artefacts, Chapter 10: Architecting at Machine Speed: Patch Velocity, Detection and the Stop Path by Design, Chapter 12: The Architect's Own Use of AI: Drafting, Research and Review in Modes 1 to 3, Chapter 13: An AI Agent Team for Security Architecture: Skills, Mandates and Containment, Chapter 14: Verifying What AI Proposes: Review for Soundness When the Reviewer Depends on the AI, Chapter 16: The Role Map: CISO, Enterprise Architect, AI Architect, Platform and Product Teams, Chapter 17: Design Authority, Decision Forums and Gates Instead of Meetings, Chapter 18: Regulation as Constraint: AI Act, NIS 2, DORA, CRA and the Architect's Accountability, Chapter 19: Communicating Security Architecture: Boards, Supervisors, Auditors and Engineers, Chapter 20: Public Authorities and Multinationals: Sovereignty, Procurement and Many Legal Regimes, Chapter 21: Competences of the Transformed Security Architect: A Framework, Chapter 22: Learning Paths, Certification, Hiring and Upskilling, Chapter 23: The Future of the Role: Will There Be a Security Architect in 2036?, Chapter 24: Case Studies and Anti-Patterns, Chapter 25: A Year in the Role: The Transformed Architect at Nordvik Region and Hansa Mutual, Chapter 26: Nordvik Region and Hansa Mutual: Conclusions for Two Organisations, Chapter 27: Conclusions: The Transformed Security Architect, About the Author.
- Source [169]: Nordqvist, G. (2026). AI Platform and Security: Building and Securing AI Platforms in European Enterprises and Public Authorities. The Architecture as Code Series, Book 3, published at aips.geon.se. Available at: https://aips.geon.se/ (accessed 2026-11-01). Referenced in: Chapter 1: Introduction: The Security Architect Transformed, Chapter 2: What the Security Architect Did: The Role Before the Transformation, Chapter 3: Four Shifts: Code, Boundaries, Machine Speed and the AI Team, Chapter 5: Security Architecture as Code: From Documents to Executable Design, Chapter 6: Threat Modelling Transformed: Continuous, Generated and AI-Assisted, Chapter 7: Designing Boundaries: Zero Trust and Containment for People, Agents and Machines, Chapter 8: Identity Architecture for Non-Human Actors: Workloads, Agents and Delegated Authority, Chapter 9: The Control Catalogue, Evidence and Assurance as the Architect's Artefacts, Chapter 10: Architecting at Machine Speed: Patch Velocity, Detection and the Stop Path by Design, Chapter 11: Resilience and Recovery by Design: The Architect's Share of Recoverability, Chapter 12: The Architect's Own Use of AI: Drafting, Research and Review in Modes 1 to 3, Chapter 13: An AI Agent Team for Security Architecture: Skills, Mandates and Containment, Chapter 15: Keeping the Craft: Deskilling, Judgement and the Architect Who Still Can, Chapter 16: The Role Map: CISO, Enterprise Architect, AI Architect, Platform and Product Teams, Chapter 17: Design Authority, Decision Forums and Gates Instead of Meetings, Chapter 18: Regulation as Constraint: AI Act, NIS 2, DORA, CRA and the Architect's Accountability, Chapter 19: Communicating Security Architecture: Boards, Supervisors, Auditors and Engineers, Chapter 20: Public Authorities and Multinationals: Sovereignty, Procurement and Many Legal Regimes, Chapter 23: The Future of the Role: Will There Be a Security Architect in 2036?, Chapter 24: Case Studies and Anti-Patterns, Chapter 25: A Year in the Role: The Transformed Architect at Nordvik Region and Hansa Mutual, Chapter 27: Conclusions: The Transformed Security Architect, About the Author.
- Source [170]: Nordqvist, G. (2026). AI Red Team: AI as an Active Part of Cyber Defence in European Enterprises and Public Authorities. The Architecture as Code Series, Book 4, published at aired.geon.se. Available at: https://aired.geon.se/ (accessed 2026-11-06). Referenced in: Chapter 1: Introduction: The Security Architect Transformed, Chapter 2: What the Security Architect Did: The Role Before the Transformation, Chapter 3: Four Shifts: Code, Boundaries, Machine Speed and the AI Team, Chapter 4: The Transformed Role Defined: Mandate, Accountabilities and Decision Rights, Chapter 6: Threat Modelling Transformed: Continuous, Generated and AI-Assisted, Chapter 7: Designing Boundaries: Zero Trust and Containment for People, Agents and Machines, Chapter 8: Identity Architecture for Non-Human Actors: Workloads, Agents and Delegated Authority, Chapter 9: The Control Catalogue, Evidence and Assurance as the Architect's Artefacts, Chapter 10: Architecting at Machine Speed: Patch Velocity, Detection and the Stop Path by Design, Chapter 11: Resilience and Recovery by Design: The Architect's Share of Recoverability, Chapter 12: The Architect's Own Use of AI: Drafting, Research and Review in Modes 1 to 3, Chapter 13: An AI Agent Team for Security Architecture: Skills, Mandates and Containment, Chapter 14: Verifying What AI Proposes: Review for Soundness When the Reviewer Depends on the AI, Chapter 15: Keeping the Craft: Deskilling, Judgement and the Architect Who Still Can, Chapter 16: The Role Map: CISO, Enterprise Architect, AI Architect, Platform and Product Teams, Chapter 17: Design Authority, Decision Forums and Gates Instead of Meetings, Chapter 18: Regulation as Constraint: AI Act, NIS 2, DORA, CRA and the Architect's Accountability, Chapter 19: Communicating Security Architecture: Boards, Supervisors, Auditors and Engineers, Chapter 20: Public Authorities and Multinationals: Sovereignty, Procurement and Many Legal Regimes, Chapter 21: Competences of the Transformed Security Architect: A Framework, Chapter 22: Learning Paths, Certification, Hiring and Upskilling, Chapter 25: A Year in the Role: The Transformed Architect at Nordvik Region and Hansa Mutual, Chapter 26: Nordvik Region and Hansa Mutual: Conclusions for Two Organisations, Chapter 27: Conclusions: The Transformed Security Architect, About the Author.
- Source [171]: Nordqvist, G. (2026). AI Threat: Are the Dystopias Coming True? Evidence, Risk and Response for European Enterprises and Public Authorities. The Architecture as Code Series, Book 5, published at aithreat.geon.se. Available at: https://aithreat.geon.se/ (accessed 2026-11-06). Referenced in: Chapter 1: Introduction: The Security Architect Transformed, Chapter 2: What the Security Architect Did: The Role Before the Transformation, Chapter 3: Four Shifts: Code, Boundaries, Machine Speed and the AI Team, Chapter 4: The Transformed Role Defined: Mandate, Accountabilities and Decision Rights, Chapter 6: Threat Modelling Transformed: Continuous, Generated and AI-Assisted, Chapter 7: Designing Boundaries: Zero Trust and Containment for People, Agents and Machines, Chapter 9: The Control Catalogue, Evidence and Assurance as the Architect's Artefacts, Chapter 10: Architecting at Machine Speed: Patch Velocity, Detection and the Stop Path by Design, Chapter 11: Resilience and Recovery by Design: The Architect's Share of Recoverability, Chapter 12: The Architect's Own Use of AI: Drafting, Research and Review in Modes 1 to 3, Chapter 13: An AI Agent Team for Security Architecture: Skills, Mandates and Containment, Chapter 14: Verifying What AI Proposes: Review for Soundness When the Reviewer Depends on the AI, Chapter 15: Keeping the Craft: Deskilling, Judgement and the Architect Who Still Can, Chapter 16: The Role Map: CISO, Enterprise Architect, AI Architect, Platform and Product Teams, Chapter 17: Design Authority, Decision Forums and Gates Instead of Meetings, Chapter 19: Communicating Security Architecture: Boards, Supervisors, Auditors and Engineers, Chapter 20: Public Authorities and Multinationals: Sovereignty, Procurement and Many Legal Regimes, Chapter 21: Competences of the Transformed Security Architect: A Framework, Chapter 22: Learning Paths, Certification, Hiring and Upskilling, Chapter 23: The Future of the Role: Will There Be a Security Architect in 2036?, Chapter 24: Case Studies and Anti-Patterns, Chapter 25: A Year in the Role: The Transformed Architect at Nordvik Region and Hansa Mutual, Chapter 26: Nordvik Region and Hansa Mutual: Conclusions for Two Organisations, Chapter 27: Conclusions: The Transformed Security Architect, About the Author.
- Source [172]: Kvadrat AB. Kvadrat – Sweden's largest network of self-employed consultants. Available at: https://www.kvadrat.se/ (accessed 2026-10-31). Referenced in: Chapter 22: Learning Paths, Certification, Hiring and Upskilling, About the Author.
Sources added during drafting
- Source [173]: Weill, P. & Ross, J. W. (2004). IT Governance: How Top Performers Manage IT Decision Rights for Superior Results. Boston, MA: Harvard Business School Press, 2004. Available at: https://store.hbr.org/product/it-governance-how-top-performers-manage-it-decision-rights-for-superior-results/2533 (accessed 2026-11-06). Referenced in: Chapter 4: The Transformed Role Defined: Mandate, Accountabilities and Decision Rights.
- Source [174]: GitHub. About code owners. GitHub Docs, living page. Available at: https://docs.github.com/en/repositories/managing-your-repositorys-settings-and-features/customizing-your-repository/about-code-owners (accessed 2026-11-06). Referenced in: Chapter 4: The Transformed Role Defined: Mandate, Accountabilities and Decision Rights, Chapter 5: Security Architecture as Code: From Documents to Executable Design, Chapter 6: Threat Modelling Transformed: Continuous, Generated and AI-Assisted, Chapter 13: An AI Agent Team for Security Architecture: Skills, Mandates and Containment.
- Source [175]: Kingdom of the Netherlands (1971). Wet op de ondernemingsraden (WOR) (Works Councils Act). Overheid.nl, wetten.overheid.nl, consolidated version. Available at: https://wetten.overheid.nl/BWBR0002747 (accessed 2026-11-06). Referenced in: Chapter 1: Introduction: The Security Architect Transformed, Chapter 4: The Transformed Role Defined: Mandate, Accountabilities and Decision Rights, Chapter 13: An AI Agent Team for Security Architecture: Skills, Mandates and Containment.
- Source [176]: Sweden (1976). Lag (1976:580) om medbestämmande i arbetslivet (MBL) (Co-determination in the Workplace Act). Sveriges riksdag, SFS 1976:580. Available at: https://www.riksdagen.se/sv/dokument-och-lagar/dokument/svensk-forfattningssamling/lag-1976580-om-medbestammande-i-arbetslivet_sfs-1976-580/ (accessed 2026-11-06). Referenced in: Chapter 1: Introduction: The Security Architect Transformed, Chapter 4: The Transformed Role Defined: Mandate, Accountabilities and Decision Rights, Chapter 13: An AI Agent Team for Security Architecture: Skills, Mandates and Containment.
- Source [177]: Conftest. Conftest: test structured configuration data with Open Policy Agent policies. Open Policy Agent project. Available at: https://www.conftest.dev/ (accessed 2026-11-06). Referenced in: Chapter 5: Security Architecture as Code: From Documents to Executable Design.
- Source [178]: OWASP Foundation. OWASP pytm: A Pythonic framework for threat modeling. OWASP Foundation project page. Available at: https://owasp.org/www-project-pytm/ (accessed 2026-11-06). Referenced in: Chapter 6: Threat Modelling Transformed: Continuous, Generated and AI-Assisted.
- Source [179]: Schneier, B. (1999). Attack Trees: Modeling Security Threats. Dr. Dobb's Journal, 24(12), December 1999. Available at: https://www.schneier.com/academic/archives/1999/12/attack_trees.html (accessed 2026-11-06). Referenced in: Chapter 6: Threat Modelling Transformed: Continuous, Generated and AI-Assisted.
- Source [180]: Schneider, C. Threagile: Agile Threat Modeling Toolkit. Threagile project. Available at: https://threagile.io/ (accessed 2026-11-06). Referenced in: Chapter 6: Threat Modelling Transformed: Continuous, Generated and AI-Assisted.
- Source [181]: Huang, K. (2025). Agentic AI Threat Modeling Framework: MAESTRO. Cloud Security Alliance, 6 February 2025. Available at: https://cloudsecurityalliance.org/blog/2025/02/06/agentic-ai-threat-modeling-framework-maestro (accessed 2026-11-06). Referenced in: Chapter 6: Threat Modelling Transformed: Continuous, Generated and AI-Assisted.
- Source [182]: Debenedetti, E., Shumailov, I., Fan, T., Hayes, J., Carlini, N., Fabian, D., Kern, C., Shi, C., Terzis, A. & Tramèr, F. (2025). Defeating Prompt Injections by Design. arXiv:2503.18813, March 2025. Available at: https://arxiv.org/abs/2503.18813 (accessed 2026-11-06). Referenced in: Chapter 7: Designing Boundaries: Zero Trust and Containment for People, Agents and Machines.
- Source [183]: Chandramouli, R. & Butcher, Z. (2023). A Zero Trust Architecture Model for Access Control in Cloud-Native Applications in Multi-Location Environments. NIST Special Publication 800-207A, September 2023. Available at: https://doi.org/10.6028/NIST.SP.800-207A (accessed 2026-11-06). Referenced in: Chapter 7: Designing Boundaries: Zero Trust and Containment for People, Agents and Machines.
- Source [184]: Beurer-Kellner, L., Buesser, B., Creţu, A.-M., Debenedetti, E., Dobos, D., Fabian, D., Fischer, M., Froelicher, D., Grosse, K., Naeff, D., Ozoani, E., Paverd, A., Tramèr, F. & Volhejn, V. (2025). Design Patterns for Securing LLM Agents against Prompt Injections. arXiv:2506.08837, June 2025. Available at: https://arxiv.org/abs/2506.08837 (accessed 2026-11-06). Referenced in: Chapter 7: Designing Boundaries: Zero Trust and Containment for People, Agents and Machines.
- Source [185]: Lodderstedt, T., Richer, J. & Campbell, B. (2023). OAuth 2.0 Rich Authorization Requests. RFC 9396, Internet Engineering Task Force, May 2023. Available at: https://www.rfc-editor.org/rfc/rfc9396 (accessed 2026-11-06). Referenced in: Chapter 8: Identity Architecture for Non-Human Actors: Workloads, Agents and Delegated Authority.
- Source [186]: Fett, D., Campbell, B., Bradley, J., Lodderstedt, T., Jones, M. & Waite, D. (2023). OAuth 2.0 Demonstrating Proof of Possession (DPoP). RFC 9449, Internet Engineering Task Force, September 2023. Available at: https://www.rfc-editor.org/rfc/rfc9449 (accessed 2026-11-06). Referenced in: Chapter 8: Identity Architecture for Non-Human Actors: Workloads, Agents and Delegated Authority.
- Source [187]: OWASP Foundation (2025). OWASP Non-Human Identities Top 10, 2025. OWASP Non-Human Identities Top 10 project. Available at: https://owasp.org/www-project-non-human-identities-top-10/2025/ (accessed 2026-11-06). Referenced in: Chapter 8: Identity Architecture for Non-Human Actors: Workloads, Agents and Delegated Authority.
- Source [188]: National Institute of Standards and Technology. Open Security Controls Assessment Language (OSCAL). NIST Computer Security Resource Center. Available at: https://pages.nist.gov/OSCAL/ (accessed 2026-11-06). Referenced in: Chapter 9: The Control Catalogue, Evidence and Assurance as the Architect's Artefacts.
- Source [189]: National Institute of Standards and Technology, Joint Task Force (2022). Assessing Security and Privacy Controls in Information Systems and Organizations. NIST Special Publication 800-53A, Revision 5, January 2022. Available at: https://csrc.nist.gov/pubs/sp/800/53/a/r5/final (accessed 2026-11-06). Referenced in: Chapter 9: The Control Catalogue, Evidence and Assurance as the Architect's Artefacts.
- Source [190]: in-toto Project. in-toto Attestation Framework. Cloud Native Computing Foundation. Available at: https://github.com/in-toto/attestation (accessed 2026-11-06). Referenced in: Chapter 9: The Control Catalogue, Evidence and Assurance as the Architect's Artefacts.
- Source [191]: Institute of Internal Auditors (2020). The IIA's Three Lines Model: An update of the Three Lines of Defense. The IIA, July 2020. Available at: https://www.theiia.org/en/content/position-papers/2020/the-iias-three-lines-model-an-update-of-the-three-lines-of-defense/ (accessed 2026-11-06). Referenced in: Chapter 9: The Control Catalogue, Evidence and Assurance as the Architect's Artefacts, Chapter 16: The Role Map: CISO, Enterprise Architect, AI Architect, Platform and Product Teams.
- Source [192]: Dempsey, K., Chawla, N. S., Johnson, A., Johnston, R., Jones, A. C., Orebaugh, A., Scholl, M. & Stine, K. (2011). Information Security Continuous Monitoring (ISCM) for Federal Information Systems and Organizations. NIST Special Publication 800-137, September 2011. Available at: https://doi.org/10.6028/NIST.SP.800-137 (accessed 2026-11-06). Referenced in: Chapter 9: The Control Catalogue, Evidence and Assurance as the Architect's Artefacts.
- Source [193]: Cybersecurity and Infrastructure Security Agency (2021). Binding Operational Directive 22-01: Reducing the Significant Risk of Known Exploited Vulnerabilities. CISA, 3 November 2021. Available at: https://www.cisa.gov/news-events/directives/bod-22-01-reducing-significant-risk-known-exploited-vulnerabilities (accessed 2026-11-06). Referenced in: Chapter 10: Architecting at Machine Speed: Patch Velocity, Detection and the Stop Path by Design.
- Source [194]: Swanson, M., Bowen, P., Phillips, A. W., Gallup, D. & Lynes, D. (2010). Contingency Planning Guide for Federal Information Systems. NIST Special Publication 800-34, Revision 1. National Institute of Standards and Technology, May 2010. Available at: https://doi.org/10.6028/NIST.SP.800-34r1 (accessed 2026-11-06). Referenced in: Chapter 11: Resilience and Recovery by Design: The Architect's Share of Recoverability.
- Source [195]: CrowdStrike (2024). External Technical Root Cause Analysis: Channel File 291. CrowdStrike, 6 August 2024. Available at: https://www.crowdstrike.com/wp-content/uploads/2024/08/Channel-File-291-Incident-Root-Cause-Analysis-08.06.2024.pdf (accessed 2026-11-06). Referenced in: Chapter 11: Resilience and Recovery by Design: The Architect's Share of Recoverability.
- Source [196]: Cook, R. I. (1998). How Complex Systems Fail. Cognitive Technologies Laboratory, University of Chicago. Available at: https://how.complexsystems.fail/ (accessed 2026-11-06). Referenced in: Chapter 11: Resilience and Recovery by Design: The Architect's Share of Recoverability.
- Source [197]: Spracklen, J., Wijewickrama, R., Sakib, A. H. M. N., Maiti, A., Viswanath, B. & Jadliwala, M. (2025). We Have a Package for You! A Comprehensive Analysis of Package Hallucinations by Code Generating LLMs. 34th USENIX Security Symposium, arXiv:2406.10279. Available at: https://arxiv.org/abs/2406.10279 (accessed 2026-11-06). Referenced in: Chapter 12: The Architect's Own Use of AI: Drafting, Research and Review in Modes 1 to 3.
- Source [198]: Sharma, M., Tong, M., Korbak, T. et al. (2024). Towards Understanding Sycophancy in Language Models. International Conference on Learning Representations (ICLR 2024), arXiv:2310.13548. Available at: https://arxiv.org/abs/2310.13548 (accessed 2026-11-06). Referenced in: Chapter 12: The Architect's Own Use of AI: Drafting, Research and Review in Modes 1 to 3.
- Source [199]: Anthropic (2025). How we built our multi-agent research system. Anthropic Engineering, 13 June 2025. Available at: https://www.anthropic.com/engineering/multi-agent-research-system (accessed 2026-11-06). Referenced in: Chapter 13: An AI Agent Team for Security Architecture: Skills, Mandates and Containment.
- Source [200]: Skitka, L. J., Mosier, K. L. & Burdick, M. (2000). Accountability and automation bias. International Journal of Human-Computer Studies, 52(4), 701–717. Available at: https://doi.org/10.1006/ijhc.1999.0349 (accessed 2026-11-06). Referenced in: Chapter 14: Verifying What AI Proposes: Review for Soundness When the Reviewer Depends on the AI.
- Source [201]: Goddard, K., Roudsari, A. & Wyatt, J. C. (2012). Automation bias: a systematic review of frequency, effect mediators, and mitigators. Journal of the American Medical Informatics Association, 19(1), 121–127. Available at: https://doi.org/10.1136/amiajnl-2011-000089 (accessed 2026-11-06). Referenced in: Chapter 14: Verifying What AI Proposes: Review for Soundness When the Reviewer Depends on the AI, Chapter 15: Keeping the Craft: Deskilling, Judgement and the Architect Who Still Can.
- Source [202]: Zheng, L., Chiang, W.-L., Sheng, Y., Zhuang, S., Wu, Z., Zhuang, Y., Lin, Z., Li, Z., Li, D., Xing, E. P., Zhang, H., Gonzalez, J. E. & Stoica, I. (2023). Judging LLM-as-a-Judge with MT-Bench and Chatbot Arena. Advances in Neural Information Processing Systems 36, Datasets and Benchmarks Track, 2023. Available at: https://arxiv.org/abs/2306.05685 (accessed 2026-11-06). Referenced in: Chapter 14: Verifying What AI Proposes: Review for Soundness When the Reviewer Depends on the AI.
- Source [203]: Panickssery, A., Bowman, S. R. & Feng, S. (2024). LLM Evaluators Recognize and Favor Their Own Generations. Advances in Neural Information Processing Systems 37, 2024. Available at: https://arxiv.org/abs/2404.13076 (accessed 2026-11-06). Referenced in: Chapter 14: Verifying What AI Proposes: Review for Soundness When the Reviewer Depends on the AI, Chapter 23: The Future of the Role: Will There Be a Security Architect in 2036?.
- Source [204]: Huang, J., Chen, X., Mishra, S., Zheng, H. S., Yu, A. W., Song, X. & Zhou, D. (2024). Large Language Models Cannot Self-Correct Reasoning Yet. International Conference on Learning Representations (ICLR), 2024. Available at: https://arxiv.org/abs/2310.01798 (accessed 2026-11-06). Referenced in: Chapter 14: Verifying What AI Proposes: Review for Soundness When the Reviewer Depends on the AI.
- Source [205]: Jia, Y. & Harman, M. (2011). An Analysis and Survey of the Development of Mutation Testing. IEEE Transactions on Software Engineering, 37(5), 649–678. Available at: https://doi.org/10.1109/TSE.2010.62 (accessed 2026-11-06). Referenced in: Chapter 14: Verifying What AI Proposes: Review for Soundness When the Reviewer Depends on the AI.
- Source [206]: Bacchelli, A. & Bird, C. (2013). Expectations, Outcomes, and Challenges of Modern Code Review. Proceedings of the 35th International Conference on Software Engineering (ICSE 2013), IEEE, 712–721. Available at: https://doi.org/10.1109/ICSE.2013.6606617 (accessed 2026-11-06). Referenced in: Chapter 14: Verifying What AI Proposes: Review for Soundness When the Reviewer Depends on the AI.
- Source [207]: Budzyń, K. et al. (2025). Endoscopist deskilling risk after exposure to artificial intelligence in colonoscopy: a multicentre, observational study. The Lancet Gastroenterology & Hepatology, 10(10), 896–903. Available at: https://doi.org/10.1016/S2468-1253(25)00133-5 (accessed 2026-11-06). Referenced in: Chapter 15: Keeping the Craft: Deskilling, Judgement and the Architect Who Still Can.
- Source [208]: Lave, J. & Wenger, E. (1991). Situated Learning: Legitimate Peripheral Participation. Cambridge University Press. Available at: https://doi.org/10.1017/CBO9780511815355 (accessed 2026-11-06). Referenced in: Chapter 15: Keeping the Craft: Deskilling, Judgement and the Architect Who Still Can.
- Source [209]: European Commission (2025). Commission Delegated Regulation (EU) 2025/301 supplementing Regulation (EU) 2022/2554 with regard to regulatory technical standards specifying the content and the time limits for the initial notification of, and intermediate and final report on, major ICT-related incidents, and the content of the voluntary notification for significant cyber threats. Official Journal of the European Union, 20 February 2025. Available at: https://eur-lex.europa.eu/eli/reg_del/2025/301/oj (accessed 2026-11-06). Referenced in: Chapter 18: Regulation as Constraint: AI Act, NIS 2, DORA, CRA and the Architect's Accountability.
- Source [210]: European Commission (2024). Commission Implementing Regulation (EU) 2024/2956 laying down implementing technical standards for the application of Regulation (EU) 2022/2554 with regard to standard templates for the register of information. Official Journal of the European Union, 2 December 2024 (adopted 29 November 2024). Available at: https://eur-lex.europa.eu/eli/reg_impl/2024/2956/oj (accessed 2026-11-06). Referenced in: Chapter 18: Regulation as Constraint: AI Act, NIS 2, DORA, CRA and the Architect's Accountability.
- Source [211]: National Cyber Security Centre (2019). Cyber Security Toolkit for Boards. NCSC, first published 2019, living guidance. Available at: https://www.ncsc.gov.uk/collection/board-toolkit (accessed 2026-11-06). Referenced in: Chapter 19: Communicating Security Architecture: Boards, Supervisors, Auditors and Engineers.
- Source [212]: Beyer, B., Jones, C., Petoff, J. & Murphy, N. R. (2016). Site Reliability Engineering: How Google Runs Production Systems. Sebastopol, CA: O'Reilly Media, chapter 4, Service Level Objectives. Available at: https://sre.google/sre-book/service-level-objectives/ (accessed 2026-11-06). Referenced in: Chapter 19: Communicating Security Architecture: Boards, Supervisors, Auditors and Engineers.
- Source [213]: Strathern, M. (1997). 'Improving ratings': audit in the British University system. European Review, 5(3), 305–321. Available at: https://doi.org/10.1002/(SICI)1234-981X(199707)5:3%3C305::AID-EURO184%3E3.0.CO;2-4 (accessed 2026-11-06). Referenced in: Chapter 19: Communicating Security Architecture: Boards, Supervisors, Auditors and Engineers.
- Source [214]: Court of Justice of the European Union (2020). Judgment of 16 July 2020, Data Protection Commissioner v Facebook Ireland Limited and Maximillian Schrems (Schrems II), Case C-311/18, ECLI:EU:C:2020:559. Court of Justice of the European Union, 16 July 2020. Available at: https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:62018CJ0311 (accessed 2026-11-06). Referenced in: Chapter 20: Public Authorities and Multinationals: Sovereignty, Procurement and Many Legal Regimes.
- Source [215]: Prudential Regulation Authority (2021). Supervisory Statement SS2/21: Outsourcing and third party risk management. Bank of England, March 2021. Available at: https://www.bankofengland.co.uk/prudential-regulation/publication/2021/march/outsourcing-and-third-party-risk-management-ss (accessed 2026-11-06). Referenced in: Chapter 20: Public Authorities and Multinationals: Sovereignty, Procurement and Many Legal Regimes.
- Source [216]: Swiss Confederation (2020). Federal Act of 25 September 2020 on Data Protection (Data Protection Act, FADP), SR 235.1. Fedlex, in force 1 September 2023. Available at: https://www.fedlex.admin.ch/eli/cc/2022/491/en (accessed 2026-11-06). Referenced in: Chapter 20: Public Authorities and Multinationals: Sovereignty, Procurement and Many Legal Regimes.
- Source [217]: UK Parliament (2018). Data Protection Act 2018, c. 12. legislation.gov.uk, 23 May 2018. Available at: https://www.legislation.gov.uk/ukpga/2018/12/contents (accessed 2026-11-06). Referenced in: Chapter 20: Public Authorities and Multinationals: Sovereignty, Procurement and Many Legal Regimes.
- Source [218]: FINMA (2024). FINMA Guidance 08/2024: Governance and risk management when using artificial intelligence. Swiss Financial Market Supervisory Authority, 18 December 2024. Available at: https://www.finma.ch/news/2024/12/20241218-mm-finma-am-08-24/ (accessed 2026-11-06). Referenced in: Chapter 20: Public Authorities and Multinationals: Sovereignty, Procurement and Many Legal Regimes, Chapter 26: Nordvik Region and Hansa Mutual: Conclusions for Two Organisations.
- Source [219]: European Commission (2023). Communication from the Commission to the European Parliament and the Council: Closing the cybersecurity talent gap to boost the EU's competitiveness, growth and resilience ('The Cybersecurity Skills Academy'). COM(2023) 207 final, 18 April 2023. Available at: https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:52023DC0207 (accessed 2026-11-06). Referenced in: Chapter 21: Competences of the Transformed Security Architect: A Framework.
- Source [220]: Schmidt, F. L. & Hunter, J. E. (1998). The Validity and Utility of Selection Methods in Personnel Psychology: Practical and Theoretical Implications of 85 Years of Research Findings. Psychological Bulletin, 124(2), 262–274. Available at: https://doi.org/10.1037/0033-2909.124.2.262 (accessed 2026-11-06). Referenced in: Chapter 22: Learning Paths, Certification, Hiring and Upskilling.
- Source [221]: Sackett, P. R., Zhang, C., Berry, C. M. & Lievens, F. (2022). Revisiting meta-analytic estimates of validity in personnel selection: Addressing systematic overcorrection for restriction of range. Journal of Applied Psychology, 107(11), 2040–2068. Available at: https://doi.org/10.1037/apl0000994 (accessed 2026-11-06). Referenced in: Chapter 22: Learning Paths, Certification, Hiring and Upskilling.
- Source [222]: Brynjolfsson, E., Chandar, B. & Chen, R. (2025). Canaries in the Coal Mine? Six Facts about the Recent Employment Effects of Artificial Intelligence. Stanford Digital Economy Lab, August 2025. Available at: https://digitaleconomy.stanford.edu/publications/canaries-in-the-coal-mine/ (accessed 2026-11-06). Referenced in: Chapter 22: Learning Paths, Certification, Hiring and Upskilling, Chapter 23: The Future of the Role: Will There Be a Security Architect in 2036?.
- Source [223]: World Economic Forum (2025). The Future of Jobs Report 2025. World Economic Forum, January 2025. Available at: https://www.weforum.org/publications/the-future-of-jobs-report-2025/ (accessed 2026-11-06). Referenced in: Chapter 23: The Future of the Role: Will There Be a Security Architect in 2036?.
- Source [224]: Wack, P. (1985). Scenarios: Uncharted Waters Ahead. Harvard Business Review, 63(5), September–October 1985, 72–89. Available at: https://hbr.org/1985/09/scenarios-uncharted-waters-ahead (accessed 2026-11-06). Referenced in: Chapter 23: The Future of the Role: Will There Be a Security Architect in 2036?.
- Source [225]: Tetlock, P. E. (2005). Expert Political Judgment: How Good Is It? How Can We Know? Princeton, NJ: Princeton University Press, 2005. Available at: https://press.princeton.edu/books/paperback/9780691175973/expert-political-judgment (accessed 2026-11-06). Referenced in: Chapter 23: The Future of the Role: Will There Be a Security Architect in 2036?.
- Source [226]: CNCF TAG App Delivery (2023). CNCF Platforms White Paper. Cloud Native Computing Foundation, April 2023. Available at: https://tag-app-delivery.cncf.io/whitepapers/platforms/ (accessed 2026-11-06). Referenced in: Chapter 23: The Future of the Role: Will There Be a Security Architect in 2036?.
- Source [227]: Reason, J. (2000). Human error: models and management. BMJ, 320(7237), 768–770. Available at: https://doi.org/10.1136/bmj.320.7237.768 (accessed 2026-11-06). Referenced in: Chapter 24: Case Studies and Anti-Patterns.
- Source [228]: Prudential Regulation Authority (2021). Supervisory Statement SS1/21: Operational resilience: Impact tolerances for important business services. Bank of England, March 2021. Available at: https://www.bankofengland.co.uk/prudential-regulation/publication/2021/march/operational-resilience-impact-tolerances-for-important-business-services-ss (accessed 2026-11-06). Referenced in: Chapter 26: Nordvik Region and Hansa Mutual: Conclusions for Two Organisations.
How to cite
Inline citations give the source number, the author or organisation, and the year, and are written ([N, Author, Year](30_references.md#source-N)), for example (1, European Union, 2024), so that they link to the entry here. Where an author is named in the sentence, the citation still carries the source number and year. Each chapter closes with a ## Sources section that lists the works it cites, using the same numbering as this bibliography. New sources are appended to the appropriate category with the next free number; before a merge to main, scripts/renumber_sources.py --apply restores the order 1..N without gaps and removes sources that no chapter cites, after which scripts/format_citations.py --fix and scripts/update_reference_backlinks.py bring the citations and back-references up to date.