How architecture manages technical risk and meets regulatory obligations — covering architectural risk analysis, compliance by design, privacy by design, security controls as decisions, operational risk, control points, and demonstrating compliance through architecture.
...to think about encryption. By then, it's too late. Technical risk is architectural risk. Compliance requirements constrain what architectures are permissible. Control points are where risk is managed in...


