application infrastructure , Togaf, Owasp, Iam, PAM, risk management, data-protection obligations, Security Operations, enterprise security architecture, network data integration, CIS Controls, NIST SP 800-53, security-by-design principles, SABSA, hybrid architectures, threat modelling, ISO IEC 27001, NIST Cybersecurity Framework