# Security / Privacy / Compliance / Governance

> The Security / Privacy / Compliance / Governance category holds 27 architecture principles.

Record: `architecture-category:security-privacy-compliance-governance`
Kind: category
Canonical: https://banes-lab.com/ontology#architecture-category-security-privacy-compliance-governance

Listed in [Principle categories](https://banes-lab.com/api/records/architecture-category.md), after [Schema / Canonical Data / Semantics](https://banes-lab.com/records/architecture-category/schema-canonical-data-semantics.md) and before [Codebase / System Architecture Styles](https://banes-lab.com/records/architecture-category/codebase-system-architecture-styles.md).

## Principle

- [Security by Design](https://banes-lab.com/records/architecture/security-by-design.md)
- [Defense in Depth](https://banes-lab.com/records/architecture/defense-in-depth.md)
- [Least Privilege](https://banes-lab.com/records/architecture/least-privilege.md)
- [Zero Trust Architecture](https://banes-lab.com/records/architecture/zero-trust-architecture.md)
- [Secure by Default](https://banes-lab.com/records/architecture/secure-by-default.md)
- [Attack Surface Reduction](https://banes-lab.com/records/architecture/attack-surface-reduction.md)
- [Threat Modeling](https://banes-lab.com/records/architecture/threat-modeling.md)
- [Authentication](https://banes-lab.com/records/architecture/authentication.md)
- [Authorization](https://banes-lab.com/records/architecture/authorization.md)
- [Access Control](https://banes-lab.com/records/architecture/access-control.md)
- [RBAC](https://banes-lab.com/records/architecture/role-based-access-control.md)
- [ABAC](https://banes-lab.com/records/architecture/attribute-based-access-control.md)
- [Input Validation](https://banes-lab.com/records/architecture/input-validation.md)
- [Output Encoding](https://banes-lab.com/records/architecture/output-encoding.md)
- [Encryption at Rest](https://banes-lab.com/records/architecture/encryption-at-rest.md)
- [Encryption in Transit](https://banes-lab.com/records/architecture/encryption-in-transit.md)
- [Secrets Management](https://banes-lab.com/records/architecture/secrets-management.md)
- [Privacy by Design](https://banes-lab.com/records/architecture/privacy-by-design.md)
- [Compliance](https://banes-lab.com/records/architecture/compliance.md)
- [Governance](https://banes-lab.com/records/architecture/governance.md)
- [Policy Enforcement](https://banes-lab.com/records/architecture/policy-enforcement.md)
- [Policy as Code](https://banes-lab.com/records/architecture/policy-as-code.md)
- [Risk Management](https://banes-lab.com/records/architecture/risk-management.md)
- [Continuous Compliance](https://banes-lab.com/records/architecture/continuous-compliance.md)
- [CSRF Protection](https://banes-lab.com/records/architecture/csrf-protection.md)
- [Parameterized Queries](https://banes-lab.com/records/architecture/parameterized-queries.md)
- [Session Management](https://banes-lab.com/records/architecture/session-management.md)

## Layer

- [Security Core](https://banes-lab.com/records/layer/security-core.md)