This section covers security as it relates to the different components of this architecture. The overarching security goals are confidentiality, integrity, and availability. To pursue these objectives, follow best practices such as conducting periodic security evaluations of the environment, including risk and vulnerability assessments. This helps to provide a clear picture of the potential weaknesses and threats within the system, as well as ways to prioritize and to handle identified risks. Other important considerations include laws, regulations, or compliance issues that might apply to the organization as they could require more stringent security policies. Finally, consider using industry standards and frameworks such as ISO 27001 and ISO 27002 as a starting point or guide when designing for security.
The following figure outlines the key security objectives.
![CIA triad](/static/media/9198938f-8c47-5a0e-82d9-6db6a62cd3f7/DAM-737a7bc8-71cd-44ba-9c4e-d28d62d7cb60/out/cia-triad=GUID-5D74CE29-3197-49F3-9F71-D51F1F47FF61=1=en-us=Low.png)
In addition to best practices, this section includes validated settings and architectural considerations that are focused on security.