home/dictionary/architectural solution

architectural solution

nounverified·updated Aug 30, 2026

A design-level response to a security, privacy, or compliance requirement — one that resolves the requirement through structural choices about how components, systems, or services are arranged, separated, or interconnected rather than through policy alone or through a single point-in-time control. In NIST usage, an architectural solution names and describes a particular deployment configuration — such as a specific encryption placement strategy — and then maps the key-management or other security challenges that follow from that structural choice. In policy contexts (such as the passage you quoted), organizations or regulators mandate specific architectural solutions when a security property — for example, mandatory access control or network isolation — cannot be reliably achieved through configurable settings and must instead be built in at the design level.

Framework senses

NIST SP 800-171r31 senseview framework →
§1 · attested_usage_reviewer_confirmed
No definition is given in NIST SP 800-171r3. The term is attested in use at 1 citation in that document; a definition is pending curation.
Increment 2: attested in 800-171r3 without a glossary definition.
Legacy lexicon import1 senseview framework →
§1 · web_lookup_draft
A design-level response to a security, privacy, or compliance requirement — one that resolves the requirement through structural choices about how components, systems, or services are arranged, separated, or interconnected rather than through policy alone or through a single point-in-time control. In NIST usage, an architectural solution names and describes a particular deployment configuration — such as a specific encryption placement strategy — and then maps the key-management or other security challenges that follow from that structural choice. In policy contexts (such as the passage you quoted), organizations or regulators mandate specific architectural solutions when a security property — for example, mandatory access control or network isolation — cannot be reliably achieved through configurable settings and must instead be built in at the design level.
DR-088 backfill from the noun definition column