computer science

Sherwood Applied Business Security Architecture

Sherwood Applied Business Security Architecture is a computer science topic covered in the lgStudy science library. This page brings together a partial reference excerpt, illustrations, worked examples, real-world applications and a short study plan, so you can understand Sherwood Applied Business Security Architecture rather than just read about it. In short: SABSA (Sherwood Applied Business Security Architecture) is a model and methodology for developing a risk-driven enterprise information security architecture and service management, to support critical business processes. It was developed independently from the Zachman Framework, but has a similar structure.

Key takeaways

Sherwood Applied Business Security Architecture belongs to computer science; place it in that map before memorising details.
Learn the definition first, then one example that makes the definition concrete.
Connect Sherwood Applied Business Security Architecture to a quantity you can measure, compute or draw — that is where exam questions come from.
Reproduce the core statement of Sherwood Applied Business Security Architecture from memory before moving on to harder problems.

Reference excerpt

SABSA (Sherwood Applied Business Security Architecture) is a model and methodology for developing a risk-driven enterprise information security architecture and service management, to support critical business processes. It was developed independently from the Zachman Framework, but has a similar structure. The primary characteristic of the SABSA model is that everything must be derived from an analysis of the business requirements for security, especially those in which security has an enabling function through which new business opportunities can be developed and exploited. The process analyzes the business requirements at the outset, and creates a chain of traceability through the strategy and concept, design, implementation, and ongoing ‘manage and measure’ phases of the lifecycle to ensure that the business mandate is preserved. Framework tools created from practical experience further support the whole methodology. The model is layered, with the top layer being the business requirements definition stage. At each lower layer a new level of abstraction and detail is developed, going through the definition of the conceptual architecture, logical services architecture, physical infrastructure architecture and finally at the lowest layer, the selection of technologies and products (component architecture). The SABSA model itself is generic and can be the starting point for any organization, but by going through the process of analysis and decision-making implied by its structure, it becomes specific to the enterprise, and is finally highly customized to a unique business model. It becomes in reality the enterprise security architecture, and it is central to the success of a strategic program of information security management within the organization. SABSA is a particular example of a methodology that can be used both for IT (information technology) and OT (operational technology) environments.

SABSA matrix

Note: The above is the original SABSA Matrix, which is still valid today, but it has been expanded by a comprehensive service management matrix and updated in some detail and terminology areas. In the words of David Lynas, SABSA author, "The SABSA Matrix and the SABSA Service Management Matrix have not been updated since the late 90s. We have redesigned them to deliver the improvements your feedback has requested over the years. We have not fundamentally changed the structure or principles of the matrices (very few elements have changed position) but have focused on terminology update and consistency." The new versions can be downloaded (along with the 2009 revision of the SABSA White Paper and other important documents like the SABSA Certification Roadmap) at the SABSA Members' Web Site.

References

The SABSA Method John Sherwood, Andrew Clark, David Lynas (2004) “Enterprise Security Architecture: A Business-Driven Approach” ISBN 9781578203185 (ISBN 157820318X)

External links SABSA website The SABSA Institute The SABSA Institute Recommendations for the NIST Cyber Security Framework version 2.0

Worked examples

Example 1 — a first encounter with Sherwood Applied Business Security Architecture

Start with the simplest possible case. Write down what Sherwood Applied Business Security Architecture claims or describes in one sentence, then invent the smallest concrete situation in which that sentence is true. In computer science, the smallest case is usually a single object, a single equation or a single measurement. Check that every symbol or term in your sentence has a meaning in that case.

Example 2 — changing one variable

Take the situation from Example 1 and change exactly one quantity: double it, halve it, or set it to zero. Predict what should happen to Sherwood Applied Business Security Architecture before you calculate. Comparing your prediction with the result is the fastest way to find out whether you understand the idea or only the words.

Example 3 — an exam-style question

Typical questions about Sherwood Applied Business Security Architecture ask you to (a) state it precisely, (b) apply it to given data, and (c) explain a limitation. Practise writing all three answers in under five minutes; the third part is what separates a full-mark answer from an average one.

Applications of Sherwood Applied Business Security Architecture

In research: Sherwood Applied Business Security Architecture appears in computer science research whenever the underlying quantities have to be modelled precisely. Papers usually cite it as a starting assumption and then explore where it breaks down.
In technology and industry: Engineering practice reuses Sherwood Applied Business Security Architecture in design rules, simulations and safety margins. Knowing the idea lets you read a specification sheet and understand why the numbers look the way they do.
In the classroom: Sherwood Applied Business Security Architecture is common in secondary-school and first-year university syllabi. It links to neighbouring topics Computer security, Enterprise architecture, so understanding it makes those chapters shorter.
In everyday life: Look for Sherwood Applied Business Security Architecture outside the textbook — in sport, cooking, traffic, electronics or the sky above you. An example you found yourself is remembered far longer than one you were given.

Ask Teacher Smith questions about this articleOpens your AI tutor with a question about “Sherwood Applied Business Security Architecture” →

Affiliate

Preply — study more efficiently by working with a personal tutor. 50% off.

How to study Sherwood Applied Business Security Architecture in 20 minutes

Read the reference excerpt below once, without taking notes.
Close the page and write down what Sherwood Applied Business Security Architecture means in your own words.
Compare your version with the excerpt and mark what you missed.
Work through the three examples above with pen and paper.
Explain Sherwood Applied Business Security Architecture out loud to somebody else — or to Teacher Smith in the lgStudy chat.

Frequently asked questions

What is Sherwood Applied Business Security Architecture in simple terms?

Why does Sherwood Applied Business Security Architecture matter?

Because it connects several computer science ideas at once: it gives you a definition you can apply, a quantity you can calculate, and a way to check whether a result is plausible.

How should I study Sherwood Applied Business Security Architecture?

Read the excerpt, restate it from memory, then work through the examples and applications listed on this page. The five-step study plan above takes about twenty minutes.

What does this page cover?

It gives you a compact reference excerpt plus original lgStudy explanations, examples, applications and study material on Sherwood Applied Business Security Architecture.