metrics reporting , compliance monitoring , Vulnerability Management, Data Protection, Iso 27001, Incident Management, cybersecurity governance framework, control gaps, architecture risks, security resilience, secure-by-design assessments, Regulatory Compliance, vendor security assessments, MAS Technology Risk Management Guidelines, control requirements, CIS, secure design standards, Stakeholder Engagement, Security Policies, nist, architecture review checklists, architecture review criteria