Introduces defensible cybersecurity architecture and explains how ten security domains organize responsibilities across enterprise and cloud environments. Clarifies the purpose of each domain, how controls connect to requirements and measurable acceptance criteria, and how to read a system diagram as an architectural security map that supports consistent design reviews and accountable outcomes.

​

Security design operations define how security architecture is executed within technical design authorities and centers of excellence across enterprise and cloud environments. It shows how to interpret system diagrams, clarify security responsibilities across key domains, and translate design decisions into control expectations, requirements, and measurable acceptance criteria.

​

This course introduces students to the Defensible 10 Standards and explains how the ten domains organize security responsibilities across enterprise and cloud environments. Students learn the purpose of each domain, the relationships among controls, requirements, and measurable acceptance criteria, and how to interpret a system diagram through the D10S lens. 

​

This advanced course teaches how to review a solution architecture diagram from an attacker’s perspective and translate findings into a defensible security design. Students learn to map attack stages and entry points, threat-model components and data flows, align attacker behaviors to real techniques, and produce clear remediation recommendations. 

This practicum develops practical modeling skills for designing secure system architectures using structured, repeatable techniques. Learners will apply real-world design principles to model system components, assess exposure, and document defensible architecture patterns, with a focus on modularity, precision, and traceability in design workflows.

​

This course examines how secure cloud systems are architected through structured design practices. It covers foundational engineering concepts, including landing zone architecture, hub-and-spoke segmentation, tenant isolation, encryption and key management, and secure workload deployment. Learners gain practical insight into aligning design principles, trust boundaries, and security controls across multi-cloud and hybrid environments.