SABSA Foundation

Module F1 – Security Strategy & Planning

· Principles & Objectives of Security Architecture

o Enterprise Security Architecture

o Guiding Principles

o The Engineer’s Complex System & Holistic Approach

o SABSA Features, Advantages & Benefits

· The SABSA Framework

o The SABSA Matrix

o The SABSA Service Management Matrix

o Traceability Concepts

· Business Requirements Engineering & Attributes Profiling

o Business Target Abstraction Technique

o Attributes

· Risk & Opportunity Modelling

o Risk Management in Business & Architecture

o Assessing Risk Using Attributes

o The SABSA Opportunity Model

o Removing Subjectivity & Creating Re-usable Structure

· Policy Architecture Framework

o The SABSA Policy Framework

o SABSA Domains & Policy

o Creating The Policy Model

· Systems Engineering & Integrated Compliance

o Systems Engineering Principles in SABSA

o SABSA’s Integrated Compliance Framework

· Capability-based Defence-in-Depth

o Control Strategy

o The SABSA Multi-tiered Control Strategy

· SABSA Governance Framework

o SABSA Governance Model

o SABSA Roles & Responsibilities Framework

· Security Domain Concepts

o Domain Types

o Domain Models

o Registration & Certification

o Systemic Risk Interactions Between Domains

· Security Time & Performance Concepts

o SABSA Lifecycle

o Through-life Risk Management Framework

o Process Improvement Framework

o Performance Management Framework

o Architectural Vitality Framework

Module F2 – Security Services & Service Management

· Information Security & Data Security Architectures

o The Design Phase – Logical, Physical & Component Layers

o Service Management Overlay for the Design Phase Layers

o Principles of Integration & Alignment

o Start-up Approaches

· Risk Treatment Architecture

o Risk Treatment & Policy Management Architecture

o The SABSA Assurance Model

· Transformation & Service Architecture

o Top-down Process Analysis in SABSA

o Securing Information Transformations & Information Flows

o Security Services Definition & Modelling Processes

o Security Service Management Value Proposition

· Entity & Trust Modelling

o Trust & Trust Models

o Decomposing Complex Trust in Solutions Specification

· Security Associations Modelling

o Security Associations Modelling

o Inter-Domain Complexities

o The Extended Domain Concept

· Security Service Sequencing & Performance Management

o Temporal Considerations for Security Architecture

o Security Service Sequencing