SABSA TRAINING CONSULTING
Skip to content

Practical SABSA using Modelling Tools

Overview

The Practical SABSA using Modelling Tools course supplements the SABSA Foundation and Advanced Modules by exploring how to put SABSA theory into practice by effectively using modelling techniques.

While many students of SABSA appreciate the framework for its completeness of vision and intellectual rigour, they often encounter challenges in establishing it as an agile, cost-effective practice within their organisation. In particular, the number of required artefacts in the SABSA Matrices that must then be maintained with referential integrity represents a considerable document management overhead when applied at scale. This is not a problem unique to security: it is inherent in developing complex, multi-faceted systems.

The problem has been addressed in similarly complex domains by moving away from traditional documentation towards a model-based systems engineering (MBSE) approach, supported by tooling.

Enterprise Architecture, of which security is an indispensable aspect, has access to such an MBSE approach through the adoption of ArchiMate® into its core practice.
Unfortunately, ArchiMate’s ‘out-of-the-box’ support for the security perspective is somewhat underdeveloped and does not support SABSA’s richness, rigour and attention to detail.

Course
Outline

Using ArchiMate’s inbuilt extension mechanisms, a Working Group of experienced SABSA Practitioners has defined a Security Overlay for ArchiMate designed to fill this gap.
The Security Overlay has recently been updated and described in Modelling SABSA with ArchiMate, v2.0, published by The SABSA Institute.
The paper defines a set of properties, elements, conventions and patterns that enable the security perspectives required by the SABSA framework to be expressed in ArchiMate and overlaid onto conventional EA models.

This approach offers several advantages:

  • the model-driven approach to EA is extended to security architecture, bringing the benefits of MBSE (agility, communication, cost-efficiency, error reduction, reusability, etc.) to the task of securing systems of scale and complexity
  • use of ArchiMate’s inbuilt extension mechanisms enable vendor-neutral compatibility with existing EA Tools
  • setting out the security perspective as a re-usable standard supports tooling and resource sharing

The Practical SABSA with Modelling Tools course provides a hands-on tour of theory and practice that will equip the candidate with basic proficiency in using the Security Overlay.

These proficiencies include:

  • Comprehension of the Security Overlay: its concepts, structure, and conventions, with an understanding of the principles and trade-offs underlying its design
  • Applying the Security Overlay in guided examples and practical exercises
  • Analysing the impact of applying the Security Overlay to EA models: developing an effective modelling style while avoiding the most common pitfalls
  • Conceptualising of underlying paradigms: to predict and evaluate the consequences of diagrammatic idioms on the ability to manipulate the model programmatically
  • Applying automated scripts to the model for efficiency, validation, or anaylsis and extending the scripting capabilty to build a personal toolkit

To benefit from this course, candidates:

  • must previously have attended a SABSA Foundation Training Course
  • must be familiar with the ArchiMate® modelling notation, pre-reading will be provided in this area

The following will be advantageous but not mandatory for students interested in registering:

  • ArchiMate Foundation Level Certification
  • A working knowledge of JavaScript (or similar scripting languages)

Before taking the course,  candidates should familiarise themselves with Archi, the free Open Source modelling toolkit for creating ArchiMate models and sketches, and have a basic competence in creating ArchiMate® models.

What's Included

Virtual

  • 2-day virtual classroom training
  • Soft-copy training & workshop materials
  • Attendance Certificate
  • jArchi Plugin

Practical SABSA using Modelling Tools Dates

The current SABSA training schedule can be found on the SABSA Courses website.

 

SABSA Schedule

Course Enquiry

LEARN SABSA
from the
source.

Knowledge transfer from a team of SABSA® authors & contributors, with multiple SABSA® Practitioner or Masters Certifications.

Meet the Team

Insights &
Resources

Australian Cyber Conference, 26-28 November 2024

Find us on Stand 10 at the Australian Cyber Conference 2024, 26-28 November at Melbourne Convention & Exhibition Centre.


W100 – The SABSA White Paper

An executive summary of the SABSA Method, it’s tools, techniques and concepts. White Paper from The SABSA Institute.

Learn more - W100 – The SABSA White Paper

More Resources

EUREuro
X
X