Post-Quantum Cryptography and Crypto-Agility Standard
Defines cryptographic inventory, agility, approved algorithms, hybrid migration, testing, and lifecycle.
Standards / Network and Security / MYTHOS-SEC
Cybersecurity
Network engineering and cybersecurity standards, from topology and source of truth to zero trust and detection. Visual language: Topology, routing and state graphs, trust zones, packet and control flows, attack paths, enforcement boundaries, and evidence chains.
- Standards
- 17
- Pages
- 545
- Controls and criteria
- 115
- Companions
- 21
MYTHOS-SEC
Cybersecurity standards
17 of 17
MYTHOS-SEC-0001 MYTHOS-SEC-0002 AI Supply Chain, SBOM, AIBOM, and Artifact Provenance Standard
Defines software and AI component inventories, attestations, signing, trust, and verification.
MYTHOS-SEC-0003 Zero-Trust Policy, Authority Separation, and Capability Grant Standard
Defines continuous authorization, least privilege, separation of duties, capability grants, and evidence.
MYTHOS-SEC-0004 Security Architecture and Advanced Design Principles Standard
Defines trust boundaries, threat modeling, secure defaults, isolation, resilience, and assurance.
MYTHOS-SEC-0005 Security Engineering and SOC Automation Governance Standard
Defines security workflow automation, approvals, evidence, testing, failure handling, and oversight.
MYTHOS-SEC-0006 Firewall Engineering, Policy Architecture, and Blast-Radius Standard
Defines firewall policy design, lifecycle, NAT, segmentation, change safety, and validation.
MYTHOS-SEC-0007 Network Security Architecture and Microsegmentation Standard
Defines secure zones, identity-aware policy, workload isolation, enforcement, and verification.
MYTHOS-SEC-0008 Vulnerability Management and Exposure Assessment Standard
Defines discovery, risk, prioritization, remediation, exceptions, proof, and metrics.
MYTHOS-SEC-0009 Confidential Computing and Trusted Execution Environment Standard
Defines TEEs, attestation, threat models, secrets, deployment, evidence, and limitations.
MYTHOS-SEC-0010 Fully Homomorphic Encryption and Zero-Knowledge Proof Standard
Defines FHE and ZKP applicability, design, implementation, performance, threat models, and validation.
MYTHOS-SEC-0011 API Security and Token Lifecycle Standard
Defines API authorization, tokens, scopes, rotation, validation, monitoring, and revocation.
MYTHOS-SEC-0012 Virtualization, Hypervisor, Container, and Workload Security Standard
Defines isolation, images, runtime, orchestration, patching, policy, and monitoring.
MYTHOS-SEC-0013 Adversary Tactics and Attack Methodology - Web and Client Standard
Defines controlled adversary techniques, validation boundaries, evidence, and remediation for web and clients.
MYTHOS-SEC-0014 Adversary Tactics and Attack Methodology - Network, Wireless, and Supply Chain Standard
Defines controlled techniques and assurance for networks, wireless systems, and supply chains.
MYTHOS-SEC-0015 Penetration Testing and Ethical Hacking Standard
Defines authorization, scope, methodology, safety, evidence, reporting, remediation, and retest.
MYTHOS-SEC-0016 SIEM, Threat Hunting, and Detection Engineering Standard
Defines telemetry, detection lifecycle, hunting, testing, metrics, evidence, and operations.
MYTHOS-SEC-0017 DMZ, Perimeter, Remote Access, and Isolation Standard
Defines exposed services, segmentation, access, inspection, monitoring, resilience, and validation.
Companions
Guides and portfolios for this series
Field guides, living guides, and portfolio editions that decompose or consolidate the MYTHOS-SEC standards.
MYTHOS-FG-SEC-0001 Threat Modeling and Security Architecture
A system-level threat-modeling and security-architecture guide covering assets, data flows, trust boundaries, actors, attack surfaces, abuse cases, STRIDE-style analysis, attack trees, adversary behavior, control selection, residual risk, architecture review, verification, and living-model governance.
MYTHOS-FG-SEC-0002 Zero-Trust Architecture and Continuous Authorization
A zero-trust engineering guide covering policy decision and enforcement, identity, devices, workloads, networks, applications, data, telemetry, continuous evaluation, microsegmentation, SASE, service identity, hybrid cloud, failure design, migration, maturity, and operational assurance.
MYTHOS-FG-SEC-0003 Enterprise Firewall Engineering and Policy Architecture
A vendor-neutral enterprise firewall guide covering packet flow, sessions, zones, policy evaluation, objects, NAT, application and identity controls, TLS inspection, clustering, routing, virtual systems, cloud enforcement, policy lifecycle, automation, telemetry, performance, troubleshooting, and blast-radius control.
MYTHOS-FG-SEC-0004 IPsec, TLS VPN, Remote Access, and Tunnel Troubleshooting
A tunnel and remote-access guide covering IPsec architecture, IKEv2, ESP, SAs, traffic selectors, NAT traversal, certificates, routing, policy, TLS VPN, client posture, split tunneling, clustering, mobility, MTU, observability, packet troubleshooting, and hybrid post-quantum transition.
MYTHOS-FG-SEC-0005 Microsegmentation, Workload Isolation, and East-West Security
A microsegmentation guide covering workload identity, policy models, distributed enforcement, host and hypervisor controls, Kubernetes network policy, service mesh, east-west traffic, dependencies, brownfield adoption, policy testing, observability, failure containment, and zero-trust integration.
MYTHOS-FG-SEC-0006 Identity, Access, PKI, Secrets, and Privileged Access Engineering
An identity-security engineering guide covering proofing, directories, authentication, passkeys, federation, OAuth and OIDC, authorization, PKI, certificates, workload identity, secrets, key management, privileged access, non-human and agent identity, lifecycle, recovery, monitoring, and post-quantum readiness.
MYTHOS-FG-SEC-0007 Vulnerability, Exposure, and Attack-Surface Management
A vulnerability and exposure guide covering asset authority, discovery, scanning, CVE and product data, CVSS v4.0, KEV, SSVC, exploitability, attack paths, business context, remediation, mitigation, exceptions, patching, cloud and application exposures, external attack surface, validation, metrics, automation, and governance.
MYTHOS-FG-SEC-0008 SIEM Architecture, Log Engineering, and Security Analytics
A SIEM and analytics guide covering logging strategy, source onboarding, collection, time, parsing, schemas, normalization, enrichment, storage, search, correlation, detection, UEBA, hunting, evidence, privacy, integrity, performance, cost, cloud architecture, engineering lifecycle, incident operations, and AI-assisted analytics.
MYTHOS-FG-SEC-0009 SOAR, Case Management, and Security Workflow Automation
A security-orchestration guide covering operating models, alert and case lifecycle, evidence, machine-readable playbooks, integrations, safe actions, approvals, automation testing, metrics, failure recovery, and governed AI-assisted response.
MYTHOS-FG-SEC-0010 Detection Engineering and Detection-as-Code
A detection-engineering guide covering hypotheses, data requirements, ATT&CK-informed coverage, event semantics, Sigma, analytics, correlation, testing, version control, deployment, observability, tuning, retirement, and AI-assisted detection development.
MYTHOS-FG-SEC-0011 Threat Hunting and Adversary-Informed Investigation
A threat-hunting guide covering hunt strategy, adversary behavior, intelligence, hypotheses, telemetry, endpoint, network, identity, cloud, timelines, graph analysis, findings, operationalization, metrics, and governed AI-assisted investigation.
MYTHOS-FG-SEC-0012 Incident Response, Forensics, and Recovery Engineering
An incident-response and recovery guide covering preparation, triage, command, containment, evidence, forensics, scoping, eradication, recovery, crisis communication, legal and privacy coordination, exercises, automation, and continuous improvement.
MYTHOS-FG-SEC-0013 Application, API, and Web Security Engineering
An application-security guide covering secure architecture, browser and web controls, APIs, authentication, authorization, sessions, input and output, cryptography, data, business logic, abuse resistance, testing, verification, deployment, monitoring, and incident readiness.
MYTHOS-FG-SEC-0014 Software and AI Supply-Chain Security
A software and AI supply-chain guide covering source, dependencies, build systems, CI/CD, provenance, signing, SBOMs, VEX, model and dataset lineage, release, distribution, updates, suppliers, validation, incident response, and governed automation.
MYTHOS-FG-SEC-0015 Cloud, Container, Kubernetes, and Workload Security
A cloud-native security guide covering shared responsibility, cloud identity, network and data controls, containers, images, registries, Kubernetes control plane, nodes, admission, pod security, workload identity, network policy, secrets, runtime defense, observability, incident response, and confidential workloads.
MYTHOS-FG-SEC-0016 Applied Cryptography, PKI, and Key Management
An applied cryptography guide covering security goals, randomness, symmetric encryption, hashes, MACs, KDFs, public-key cryptography, signatures, key establishment, protocols, PKI, certificates, HSMs, FIPS 140-3, key lifecycle, crypto agility, testing, and implementation failures.
MYTHOS-FG-SEC-0017 Post-Quantum Cryptography Implementation and Migration
A post-quantum implementation and migration guide covering quantum risk, cryptographic discovery, FIPS 203/204/205, KEM use, signatures, hybrid protocols, PKI, code signing, data protection, performance, interoperability, testing, vendors, governance, and phased enterprise transition.
MYTHOS-FG-SEC-0018 Confidential Computing, TEEs, Attestation, FHE, and ZKP
An advanced assurance and privacy-enhancing cryptography guide covering trusted execution environments, data-in-use protection, threat models, remote attestation, RATS, EAT, key release, confidential containers and AI, multi-party data collaboration, fully homomorphic encryption, zero-knowledge proofs, integration, performance, governance, and adoption limits.
MYTHOS-FG-SEC-0019 Offensive Security, Penetration Testing, and Control Validation
A governed offensive-security guide covering authorization, scoping, rules of engagement, attack-surface analysis, vulnerability validation, adversary emulation, web, API, cloud, identity, network, wireless, application, social and physical boundaries, control testing, evidence, reporting, remediation, retesting, and safe automation.
MYTHOS-GUIDE-SEC-0001 Security Engineering and Information Security
Integrated engineering guide connecting the relevant Mythos standards, implementation patterns, operating procedures, architecture decisions, evidence expectations, and maturity path for enterprise cybersecurity architecture and operations.
MYTHOS-SEC-PORT-0001 Cybersecurity Standards Portfolio
Portfolio Edition in the Standards Portfolios collection of the MYTHOS Engineering Standards Library.
Candidate status describes publication review state. It does not establish certification, legal compliance, implementation conformance, benchmark reproduction, or product readiness.