This section lists the sources cited throughout the book. The numbered source index, ordered by source number, is the canonical bibliography: every inline citation of the form (N, author or organisation, year) links to the entry with that number. The index is grouped by category so that readers can locate European instruments, the standards and frameworks the security architect works with, the literature of security architecture and engineering, the evidence on AI in engineering work, the incidents and threat reporting that set the pace, the sources on public authorities and digital sovereignty, and the earlier volumes of the series quickly.
Many of the entries were carried over verbatim from the bibliographies of the earlier volumes of The Transformed Architecture, and they keep the access dates recorded there. The remaining entries were added for this book on 2026-11-06 from the author's knowledge of the literature; they are listed in HANDOVER.md and must be verified with scripts/verify_sources.py before release.
Inline citations give the source number, the author or organisation, and the year, and are written ([N, Author, Year](30_references.md#source-N)), for example (1, European Union, 2024), so that they link to the entry here. Where an author is named in the sentence, the citation still carries the source number and year. Each chapter closes with a ## Sources section that lists the works it cites, using the same numbering as this bibliography. New sources are appended to the appropriate category with the next free number; before a merge to main, scripts/renumber_sources.py --apply restores the order 1..N without gaps and removes sources that no chapter cites, after which scripts/format_citations.py --fix and scripts/update_reference_backlinks.py bring the citations and back-references up to date.
Primary topics explored
- Numbered source index
- How to cite
About The Transformed Security Architect
The Transformed Security Architect is Book 6 of The Transformed Architecture. It describes how the security architect role is transformed when architecture is code, when AI drafts and acts, and when adversaries move at machine speed: the craft, the architect's own AI team, the role in the organisation, the competences and the career, for European enterprises and public authorities.
It builds on the conclusions of Architecture as Code, AI Governance, AI Platform and Security, AI Red Team and AI Threat.
Security architects, CISOs and heads of security architecture, enterprise, solution and AI architects, engineering leads, competence and hiring leads, procurement and programme leaders, and risk, compliance and audit.
Gunnar Nordqvist
Conceived, directed and published the books of The Transformed Architecture.
Continue with the full chapter
References: References and Sources in The Transformed Security Architect gives the detailed explanations, practical examples and implementation patterns behind this summary.
This whitepaper belongs to “Appendices” and is one of 31 drawn from the manuscript.