security reference architecture. Using this model and an asso