In the autumn of 2026 two governing bodies asked the same question about the same role. Nordvik Region's regional director asked the chief information security officer for a role charter and a competence plan for the Region's single security architect before the 2027 budget was set (AIDR-0500). Hansa Mutual's executive board asked the group CISO to show how architecture decisions would keep pace with agents that act in production, the claims-triage agent, the IT-operations agent and the SOC investigation agent HM-SEC-001 (AIDR-0550). Chapter 25 told the work that followed as a year.
This chapter sets out what each organisation decided and the answer each gave, gives each a 24-month plan and records what remains unresolved. As the conclusion of Part VI, it concerns all four shifts: Shift 1, from documents to code; Shift 2, from gatekeeper to boundary designer; Shift 3, from periodic to continuous, at machine speed; and Shift 4, from sole author to conductor of an AI team. Both organisations are fictional. The events they respond to, the July 2026 incident and the regulations that bind them, are observable; the outcomes of their plans are expected, and each plan names the signals on which it would be revised.
Both plans share the charter and catalogue kept as code, timed stop-path drills, craft kept unaided with competence records, and a horizon register reviewed each year.
Primary topics explored
- One question, two answers
- Nordvik Region: the answer to the regional director
- Hansa Mutual: the answer to the executive board
- The two artefact sets
- Two 24-month plans
- Where they differ and why
About The Transformed Security Architect
The Transformed Security Architect is Book 6 of The Transformed Architecture. It describes how the security architect role is transformed when architecture is code, when AI drafts and acts, and when adversaries move at machine speed: the craft, the architect's own AI team, the role in the organisation, the competences and the career, for European enterprises and public authorities.
It builds on the conclusions of Architecture as Code, AI Governance, AI Platform and Security, AI Red Team and AI Threat.
Security architects, CISOs and heads of security architecture, enterprise, solution and AI architects, engineering leads, competence and hiring leads, procurement and programme leaders, and risk, compliance and audit.
Gunnar Nordqvist
Conceived, directed and published the books of The Transformed Architecture.
Continue with the full chapter
Chapter 26: Nordvik Region and Hansa Mutual: Conclusions for Two Organisations in The Transformed Security Architect gives the detailed explanations, practical examples and implementation patterns behind this summary.
This whitepaper belongs to “Experience and Conclusions” and is one of 31 drawn from the manuscript.