Hossam's Arch Insight Blog

AI agents are beginning to act across enterprise applications, data platforms and external services rather than merely generate text. This changes identity and access management fundamentally. An agent must be identifiable as a distinct non-human actor, while the organisation must also preserve the identity of the user, process owner or approver who delegated authority to it.
This article presents a vendor-neutral architecture for agent identity, workload authentication, delegated authorisation, token exchange, policy enforcement, approval and audit. It explains why shared service accounts and borrowed user credentials are unsuitable, compares RBAC, ABAC, policy-based and capability-based security, and shows how permissions can be restricted by agent, user, task, tool, data classification, value, location, time and risk. It also provides enterprise examples, implementation guidance, decision criteria and a phased adoption roadmap.

AI agents extend generative AI from producing content to planning work, selecting tools and performing actions across enterprise systems. That additional capability can create genuine business value, but it also introduces risks that conventional chatbot architectures were never designed to manage. This article presents a vendor-neutral reference architecture for safely deploying AI agents in production. It distinguishes assistants, copilots, deterministic workflows, autonomous agents and multi-agent systems, then explains the orchestration, model, knowledge, integration, identity, policy, approval, observability and operational components required to govern them. The central recommendation is simple: models may interpret goals and propose actions, but deterministic enterprise controls must govern identity, data access, tool execution, approvals, financial limits, audit records and emergency shutdown. Autonomy should be earned incrementally through evidence, not granted because a demonstration looked impressive.

This article explains how organisations can establish a practical AI governance model to adopt generative and agentic AI safely while reducing risks related to data leakage, data loss, cybersecurity, privacy, unauthorised access and automated decision-making. It presents a layered governance framework covering strategy, data, models, applications, process automation, user identity, agent permissions, infrastructure, monitoring and incident response, alongside risk classification, lifecycle controls, accountability roles and a phased implementation roadmap aligned with standards such as ISO/IEC 42001, the NIST AI Risk Management Framework and OWASP guidance.

Enterprise AI has shifted from systems that generate answers to systems that can plan work, call tools, coordinate specialised agents and complete multistep business processes. Foundation models have become multimodal, reasoning-enabled and increasingly capable of operating browsers, terminals, enterprise applications and APIs.

What do you need to have to be a good solutions architect in 2026?

AI is no longer a futuristic concept — it's a transformative force that’s reshaping how organizations operate, innovate, and deliver value. Microsoft has emerged as a key player in the enterprise AI race, offering a rich portfolio of AI tools and platforms designed for diverse business needs. From everyday productivity enhancements to advanced AI modeling and development, Microsoft's ecosystem covers it all.

This article delves into BIAN's approach to Technology and Infrastructure, detailing key service domains, their interactions, and the benefits of adopting BIAN's modular architecture.

In the intricate landscape of banking operations, maintaining robust financial control is essential for ensuring accuracy, transparency, and compliance.

Risk and Compliance Management in banking involves identifying, assessing, and mitigating potential risks while ensuring adherence to regulatory requirements.

Product Fulfillment in banking refers to the processes and systems responsible for delivering financial products and services to customers

Product Fulfillment in banking refers to the processes and systems responsible for delivering financial products and services to customers

In the evolving landscape of banking, managing customer relationships effectively is paramount

In the dynamic and ever-evolving banking sector, BIAN (Banking Industry Architecture Network) has emerged as a powerful standard for structuring and streamlining banking processes

Enterprise Architecture (EA) isn’t what it used to be—thanks to Artificial Intelligence (AI).

Edge computing is a distributed computing paradigm that brings computation and data storage closer to the sources of data. Unlike traditional cloud computing, which relies on centralized data centers, edge computing processes data at or near the point of generation (the "edge" of the network). This proximity reduces latency, decreases bandwidth use, enhances security, and improves the overall performance of applications, especially those requiring real-time processing

In the fast-paced tech world, boosting productivity is key to staying competitive. This article shows how integrating Large Language Models (LLMs) into software design can streamline development, improve quality, and spark innovation. Discover how LLMs can transform your team's workflow and give your business an edge.

In 2023 alone, over 12 million sensitive records were exposed due to misconfigured repositories and poorly managed secrets.

In the fast-paced world of technology, staying current with the latest trends and advancements is crucial for solutions architects.

Introduction In an era where cyber threats are becoming increasingly sophisticated, organizations must adopt robust cybersecurity frameworks…

Cell-based architecture, is an architectural style that structures an application as a collection of loosely coupled services, each of which represents a cell. This approach contrasts with monolithic architectures, where all components are tightly integrated into a single application.

BIAN (Banking Industry Architecture Network) provides a standardised framework to enhance interoperability, efficiency, and innovation in banking IT systems through service-oriented architecture. Solutions architects can leverage BIAN standards to design flexible, scalable, and compliant banking applications that streamline processes and improve customer experiences.

The National Institute of Standards and Technology (NIST) is a U.S. federal agency that develops technology, metrics, and standards to drive innovation and economic competitiveness. Established in 1901, NIST has become a cornerstone in various fields, including cybersecurity, where its standards are globally recognized and implemented.

What do you need to have to be a good solutions architect?

The Scaled Agile Framework (SAFe) is widely adopted for developing and delivering solutions in complex environments. It provides a structured approach that aligns development with business goals, ensuring agility and efficiency. Solution Architects play a crucial role in this framework, guiding the architecture to support agile practices.

Large Language Models (LLMs) represent a significant advancement in artificial intelligence, providing powerful tools for natural language understanding and generation. This article explores what LLMs are, the different types of LLMs, their proper use cases, architectural examples, and how solutions architects can leverage them in various industries, with an emphasis on government, banking, financial, and retail sectors.

APIs are crucial in modern software architecture, allowing different systems to communicate and share data. REST and GraphQL are two prominent API design paradigms. This article delves into their differences, use cases, and architectural examples to guide solutions architects in choosing the right approach for their projects.

APIs are the backbone of modern software architectures, enabling communication between different systems and services. Effective API design ensures scalability, maintainability, and usability. Here, we outline best practices for API design, with examples, standards, and commonly used API management tools for both cloud and on-premise environments.

As a Solutions Architect, leveraging leadership principles is essential to deliver successful projects and foster a collaborative environment. Here’s how you can apply key leadership principles in your role, with practical examples and scenarios.

Software architecture patterns provide a blueprint for building applications. They ensure the system is scalable, maintainable, and robust. This article explores the most common architecture patterns, providing a background, historical details, use cases, related tools and technology stacks, detailed explanations, and the pros and cons of each.

In the complex landscape of modern software development, effective communication of software architecture is crucial. The C4 model, developed by Simon Brown, provides a structured approach to visualizing software architecture, making it easier for architects, developers, and stakeholders to understand and collaborate on system design.

Enterprise Service Bus (ESB) and API Gateway are both architectural components used to manage communication and integration between various systems, but they serve different purposes and have distinct use cases, pros, and cons. Here's a detailed explanation: