{"version":"0.2.0","built_at":"2026-10-10T20:58:14.188Z","license":"CC BY 4.0 © Mike Reams","canonical":"https://catalog.mikereams.com","capability":{"id":"BC-760","name":"Cybersecurity","level":1,"parent_id":null,"l1_id":"BC-760","industry":"cross-industry","macro_id":"MC-70","path":["Cybersecurity"],"description":"Protect the enterprise's information, systems and people from digital threats — set the security posture, control who gets in, detect and respond to attacks, and reduce the weaknesses attackers would use.","aliases":["Information Security","Cyber Defense","InfoSec","Security Operations"],"in_scope":["Security policy, risk assessment and the assurance that controls work","Identity, authentication and access across workforce, customers and machines","Threat detection, incident response and recovery from security events","Vulnerability reduction across infrastructure, applications, data and suppliers"],"out_of_scope":["Physical site security, guarding and badge systems (see BC-840)","The enterprise risk framework security risk reports into (see BC-130)","Regulatory compliance programs beyond security controls (see BC-140)"],"csdm_note":"Security tooling lands as Business Applications and Technical Services; the CMDB's ownership, environment and classification fields on every Configuration Item are what vulnerability and incident records attach to.","status":"active","successor_id":null,"child_ids":["BC-760.10","BC-760.20","BC-760.30","BC-760.40","BC-760.50","BC-760.60"]},"crosswalk":{"realized_by":[{"product_id":"PR-100","product":"ServiceNow","pc_id":"PC-100.90","pc":"Security Operations","maturity":"partial","via":"BC-760.30"},{"product_id":"PR-110","product":"SAP S/4HANA","pc_id":"PC-110.90","pc":"Governance, Risk and Compliance","maturity":"partial","via":"BC-760.20.30"},{"product_id":"PR-140","product":"Microsoft 365","pc_id":"PC-140.50","pc":"Microsoft Entra ID","maturity":"strong","via":"BC-760.20.10"},{"product_id":"PR-140","product":"Microsoft 365","pc_id":"PC-140.60","pc":"Microsoft Intune","maturity":"strong","via":"BC-760.40"},{"product_id":"PR-140","product":"Microsoft 365","pc_id":"PC-140.70","pc":"Microsoft Purview","maturity":"partial","via":"BC-760.50"},{"product_id":"PR-140","product":"Microsoft 365","pc_id":"PC-140.90","pc":"Microsoft Defender","maturity":"partial","via":"BC-760.30"},{"product_id":"PR-150","product":"Oracle Fusion Cloud Applications","pc_id":"PC-150.70","pc":"Risk Management and Compliance","maturity":"partial","via":"BC-760.20.30"},{"product_id":"PR-170","product":"GitHub","pc_id":"PC-170.50","pc":"Advanced Security","maturity":"strong","via":"BC-760.50"},{"product_id":"PR-180","product":"Snowflake","pc_id":"PC-180.40","pc":"Governance","maturity":"strong","via":"BC-760.50"},{"product_id":"PR-190","product":"Okta","pc_id":"PC-190.10","pc":"Universal Directory","maturity":"core","via":"BC-760.20.10"},{"product_id":"PR-190","product":"Okta","pc_id":"PC-190.20","pc":"Single Sign-On","maturity":"core","via":"BC-760.20.20"},{"product_id":"PR-190","product":"Okta","pc_id":"PC-190.30","pc":"Adaptive Multi-Factor Authentication","maturity":"core","via":"BC-760.20.20"},{"product_id":"PR-190","product":"Okta","pc_id":"PC-190.40","pc":"Lifecycle Management","maturity":"strong","via":"BC-760.20.10"},{"product_id":"PR-190","product":"Okta","pc_id":"PC-190.50","pc":"Identity Governance","maturity":"partial","via":"BC-760.20.30"},{"product_id":"PR-190","product":"Okta","pc_id":"PC-190.60","pc":"Privileged Access","maturity":"emerging","via":"BC-760.20.40"},{"product_id":"PR-190","product":"Okta","pc_id":"PC-190.70","pc":"Customer Identity","maturity":"strong","via":"BC-760.20.20"}],"used_in":[{"vs_id":"VS-100","vs":"Commit-to-Production","stage_id":"VS-100.20","stage":"Test & Secure","order":2,"via":"BC-760.50"},{"vs_id":"VS-40","vs":"Hire-to-Retire","stage_id":"VS-40.30","stage":"Offer & Onboard","order":3,"via":"BC-760.20"},{"vs_id":"VS-40","vs":"Hire-to-Retire","stage_id":"VS-40.60","stage":"Separate & Offboard","order":6,"via":"BC-760.20"},{"vs_id":"VS-80","vs":"Demand-to-Change","stage_id":"VS-80.30","stage":"Design & Review","order":3,"via":"BC-760.50"}],"patterns":[{"id":"DP-340","name":"Zero Trust","category":"Security","via":"BC-760.20"},{"id":"DP-350","name":"Secrets Management","category":"Security","via":"BC-760.50.30"},{"id":"DP-360","name":"Federated Identity","category":"Security","via":"BC-760.20.20"},{"id":"DP-430","name":"Service Mesh","category":"Cloud","via":"BC-760.40.30"}],"stacks":[{"id":"TS-080","name":"Workforce identity stack","layer":"Identity","via":"BC-760.20"}],"books":[{"id":"BK-threat-modeling","title":"Threat Modeling","topic":"Security","via":"BC-760.50"},{"id":"BK-security-engineering","title":"Security Engineering","topic":"Security","via":"BC-760.10"},{"id":"BK-building-secure-and-reliable-systems","title":"Building Secure and Reliable Systems","topic":"Security","via":"BC-760.20"},{"id":"BK-zero-trust-networks","title":"Zero Trust Networks","topic":"Security","via":"BC-760.20"}]},"ancestors":[],"children":[{"id":"BC-760.10","name":"Security Governance & Risk","level":2,"child_count":4},{"id":"BC-760.20","name":"Identity & Access Management","level":2,"child_count":4},{"id":"BC-760.30","name":"Threat Detection & Response","level":2,"child_count":4},{"id":"BC-760.40","name":"Infrastructure & Endpoint Protection","level":2,"child_count":4},{"id":"BC-760.50","name":"Application & Data Security","level":2,"child_count":4},{"id":"BC-760.60","name":"Third-Party & Supply Chain Security","level":2,"child_count":3}]}