Security › Module 7 › Lesson 2
Control Placement
Enterprise architecture literacy — business architecture, data architecture, application architecture, technology architecture, cross-domain link — named EA rows on YOUR `$ARCH_LAB` LAB-ARCH-001.
Visual · t41_ea_literacy
EA literacy = named domain rows. $ARCH_LAB LAB-ARCH-001. Original Cyberlium.
Opening
Enterprise architecture spans business through technology — name domain rows on YOUR lab org before mapping stranger org systems without authorization.
EA literacy names: business architecture domain category, data architecture domain category, application architecture domain category, technology architecture domain category, and cross-domain link stub category. Analyst documents EA domain map on `$ARCH_LAB` LAB-ARCH-001 — five domain rows with defensive link stub each — without surveying stranger org application inventories, without copying live employer architecture without scope, without offensive network mapping recipes. Cyberlium teaches EA vocabulary on YOUR notes. Refused: stranger org inventory theft, unauthorized system mapping, offensive recon architecture. Lab row: EA domain map (five domains, cross-link stub, LAB label).
1. Named EA domain rows
Business, data, application, technology, cross-domain link — five literacy anchors.
Each domain cites YOUR lab fictional org — not stranger org CMDB exports.
Command guide
Try these commands — Named EA domain rows
═══ TOOLS & WEBSITES ═══ Browse / read these (authorized learning only — stay in YOUR lab / program scope)
SABSA — https://sabsa.org/ NIST 800-160 — https://csrc.nist.gov/publications/detail/sp/800-160/vol-1/rev-1/final TOGAF — https://www.opengroup.org/togaf
═══ INSTALL ═══
Linux (Debian/Ubuntu):
Command — copy this
sudo apt install python3
macOS:
Command — copy this
brew install python3
Windows: Download https://python.org/downloads/
═══ LINUX / macOS ═══
Command — copy this
export ARCH_LAB=${ARCH_LAB:-$HOME/cyberlium-lab/t41-arch}
cat > "$ARCH_LAB/notes/sabsa-layers.md" <<'EOF'
# SABSA Layers — LAB-ARCH-001 literacy
| Layer | Question | LAB-ARCH-001 example (fictional) |
|-------|----------|-----------------------------------|
| Contextual | Why? | Protect customer SaaS revenue + trust |
| Conceptual | What? | Secure multi-tenant order processing |
| Logical | How (concept)? | Zero-trust service mesh + encrypted data |
| Physical | How (detail)? | K8s clusters, managed DB, API GW SKU |
| Component | With what? | WAF rule set, IdP product, KMS |
| Operational | Run how? | SOC monitoring, patch cadence, DR test |
Trace requirements down layers — LAB SAMPLE literacy stub
EOFCommand — copy this
grep -E 'Contextual|Operational|LAB SAMPLE' "$ARCH_LAB/notes/sabsa-layers.md"
python3 -c "print('SABSA layers: business → operational trace — literacy only')"Primary tools to practice this lesson: grep, python3. Reference sites: SABSA (https://sabsa.org/); NIST 800-160 (https://csrc.nist.gov/publications/detail/sp/800-160/vol-1/rev-1/final); TOGAF (https://www.opengroup.org/togaf). Run every command in the box — install first, then the usage lines — only on YOUR lab / program scope.
2. Security overlay
Cross-domain link connects Module 7-1 security view — security spans all domains literacy.
Application and data domains link Module 5 pattern literacy — same LAB-ARCH-001 thread.
3. Refused
No stranger org inventory theft; no offensive network mapping; no unauthorized live system surveys.
EA literacy supports reference design — not reconnaissance cookbooks.
4. What you ship: EA domain map
Five domain rows + cross-link stub + LAB label + NEVER stranger org inventory line.
5. What you record before the next lesson
EA domain map path.
6. Wrong vs right: offensive playbooks vs YOUR threat models
Worked failure — same MSF word, opposite target. Right never needs a café Wi-Fi or classmate laptop.
Wrong
Survey stranger org public job posts and infer full application inventory as `$ARCH_LAB` EA map.
Right
EA domain map from `$ARCH_LAB` LAB-ARCH-001. Next: Reference Arch Stub.
Mission: EA domain map
1) Name five EA domain literacy rows. 2) Cross-link stub to Module 7-1 security view. 3) Each domain labeled LAB-ARCH-001. 4) Write NEVER stranger org inventory theft line.
Stuck? Ask Cyberlium AI Mentor
Ask Mentor: “Cross-domain link — minimum literacy stub?”
Knowledge Check
APPLY: EA literacy uses:
Multiple choice
Knowledge Check
APPLY: True or False: Offensive recon architecture belongs in EA lab.
True or False
Knowledge Check
APPLY: EA domain map includes:
Multiple choice