The Practical SABSA using Modelling Tools course supplements the SABSA Foundation and Advanced Modules by exploring how to put SABSA theory into practice by effectively using modelling techniques.
While many students of SABSA appreciate the framework for its completeness of vision and intellectual rigour, they often encounter challenges in establishing it as an agile, cost-effective practice within their organisation. In particular, the number of required artefacts in the SABSA Matrices that must then be maintained with referential integrity represents a considerable document management overhead when applied at scale. This is not a problem unique to security: it is inherent in developing complex, multi-faceted systems.
The problem has been addressed in similarly complex domains by moving away from traditional documentation towards a model-based systems engineering (MBSE) approach, supported by tooling.
Enterprise Architecture, of which security is an indispensable aspect, has access to such an MBSE approach through the adoption of ArchiMate® into its core practice.
Unfortunately, ArchiMate’s ‘out-of-the-box’ support for the security perspective is somewhat underdeveloped and does not support SABSA’s richness, rigour and attention to detail.