the use of external systems is controlled/limited

opensecurityarchitecture (osa) distills the know-how of the security architecture community and provides readily usable patterns for your application. this is a free framework, developed and owned by the community.