# Security The security pillar focuses on the ability to protect information, systems, and assets through risk assessments and mitigation strategies, while also delivering business value to the organization. Supply chain operations face unique security challenges due to their interconnected nature, involving multiple parties, systems, and jurisdictions. Organizations must navigate industry-specific requirements and various international trade regulations that evolve frequently and vary by region. Organizations operating global supply chains must comply with different security requirements across multiple countries and regions, while managing an increasingly complex network of suppliers, partners, and service providers. The security pillar provides an overview of design principles, best practices, and questions. You can find implementation guidance in the [Security Pillar whitepaper](https://docs.aws.amazon.com/wellarchitected/latest/security-pillar/welcome.html). **Topics** + [Design principles](design-principles-sec.md) + [Security foundations](security-foundations.md) + [Identity and access management](identity-and-access-management.md) + [Detection](detection.md) + [Infrastructure protection](infrastructure-protection.md) + [Data protection](data-protection.md) + [Incident response](incident-response.md) + [Application security](application-security.md) + [Key AWS services](key-aws-services-sec.md) + [Resources](resources-sec.md)