Attackers don't need any special authentication to reach a target endpoint — they just need to know where it is.
Why TOGAF is useful for security architecture TOGAF is an enterprise architecture method, not a security framework. That distinction matters. If you try to use TOGAF as if it were a control catalogue, ...