Skip to main content

📎 Licensing and Terms of Reuse

Licensing​

This manual is registered with the IGAC - Inspeção-Geral das Atividades Culturais under no. 949/2025, with ownership attributed to Pedro Farinha, and is published under the licence
Creative Commons Attribution–ShareAlike 4.0 International (CC BY-SA 4.0).

This licence allows:

  • Using, adapting and redistributing the content, including for commercial purposes;
  • Provided that appropriate attribution is given, including:
    • Pedro Farinha (holder of the IGAC registration);
    • Original contributors (where applicable);
    • Open-source sources used;
  • And that any derivative work is shared under the same licence (CC BY-SA 4.0).

Full legal text: CC BY-SA 4.0 - Legal Code

Terms of reuse and attribution​

Use of the manual must respect the conditions of the CC BY-SA 4.0 licence and explicitly acknowledge the authorship and origin of the work.

Recommended attribution:

“Based on Security by Design - Theory of Everything (SbD-ToE),
© Pedro Farinha (IGAC 949/2025) and contributors, under CC BY-SA 4.0.”

The IGAC registration serves as public proof of ownership and date of creation and does not alter the rights granted by the licence.

🧩 Referenced Tools, Frameworks and Models​

This manual references open frameworks and standards, such as OWASP SAMM, BSIMM, NIST SSDF, SLSA and DSOMM.
Each of these sources keeps its own licence, which must be respected in any reuse or adaptation of the content.

✅ Usage recommendations​

  • Any redistribution or adaptation must keep the attribution and the same licence (CC BY-SA 4.0).
  • Include, wherever possible, direct links to the sources and a reference to the original licence of each framework or tool.
  • The registration holder may publish new versions or revisions of the manual, with earlier versions remaining under the licence under which they were distributed.

This text describes the practical application of the licences in the context of the SbD-ToE manual.
The legally binding terms are found in the LICENSE (CC BY-SA 4.0) and, where applicable, LICENSE-CODE (Apache 2.0) files in the GitHub repository.