SABSA

What is SABSA?

SABSA (Sherwood Applied Business Security Architecture) is the internationally-acclaimed "best practice" framework for delivering cohesive information security solutions to business and government. SABSA is to security management what ITIL is to service management or PRINCE2 is to project management.

SABSA is a six-layer model covering all four parts of the IT lifecycle: Strategy, Design, Implementation and Management & Operations. SABSA ensures the security needs of the enterprise are met completely and that security services are designed, delivered, and supported as an integral part of the IT Management infrastructure.

ALC-PDA is an Accredited SABSA Education Provider for Europe and North America.

SABSA Training and Certification document Downloads

Click on the image to download the SABSA Training and Certification Services guide, which offers a detailed view of the certification paths and career roadmaps for the aspiring SABSA Security Architect.

Click on the image to download the SABSA Certification FAQ. If you're looking for complete information on the entire SABSA examination and certification process download and read this FAQ.

SABSA Public Training

ALC-PDA offers a 5-day SABSA Foundation Certificate training program that is structured into two courses and is presented by David Lynas, a member of the original SABSA development team. This two-part seminar provides participants with a comprehensive understanding of the SABSA framework - what it is, how it works, what it delivers - and demonstrates how to use the most proven security architecture design and management processes available.

The combined five-day program is for anyone who can benefit from the most comprehensive and thorough training program available in this area.

• IT / MIS Directors and Managers
• CIO / CSO
• IT Strategists and Planners
• CFO / Company Secretaries
• Computer Security Managers, Advisors, Consultants & Practitioners
• IT Line Managers
• Service Delivery Managers
• Risk Managers
• Internal and External Auditors

Foundation Module 1 - Security Strategy and Planning

This 2-day course provides participants with a comprehensive guide to the SABSA framework. Through a series of presentations, case studies and workshops, this course uses knowledge of that framework to describe business requirements in-depth, define best practice architecture concepts and develop strategies to align security with your organisational goals.

Foundation Module 2 - Security Service Management

This 3-day course leverages the strategy described in Course One to create the roadmap to design, deliver and support a set of consistent and high-quality security services. Focussing on the Design, Implementation and Management & Operations elements of the IT lifecycle, participants will define how the IT and Security departments actually make the security strategy happen. The two courses are offered at separate times and either course may be taken on its own independent of the other. However, for those primarily interested in the topics within Course 2 it is recommended that it be taken in conjunction with Course 1 wherever possible.

SABSA Fast Track Facilitated Workshop

For any organisation with a serious interest in Security Architecture, ALC-PDA offers the SABSA Fast-Track facilitated workshop. Typically held over 5 days, this program is designed to help "kick start" your Enterprise Security Architecture initiative by taking you through the entire SABSA architecture development process in just one compressed week of intensive in-house workshops and presentations. Available in Europe and North America exclusively from ALC-PDA, Fast-Track works by applying the SABSA model directly to your specific environment. Powerful and substantial results are achieved with limited budget and limited commitment of resources.

For further information please email certify@alctraining.com

SABSA Background

Information Security presents business and IT management with complex challenges. Not surprisingly, security solutions often end up being acquired on a piecemeal basis - a requirement arises, a specification is developed, a solution is sought. The inevitable result is an ad hoc mixture of technical solutions each independently designed and supported with no guarantee of compatibility or interoperability and with no necessary alignment with the goals of the business. The consequences are many, including an inordinately high cost of ownership for delivery and support of security services and security management.

SABSA (Sherwood Applied Business Security Architecture) provides a long-awaited solution.

A key function of any architecture is to provide a framework within which technical and operational complexity can be managed successfully. This is the very essence of SABSA. The SABSA framework has evolved since 1995 as a holistic business-driven approach for delivering cohesive security solutions to business and government. SABSA is a six-layer model covering all four parts of the IT lifecycle: Strategy, Design, Implementation and Management & Operations. SABSA ensures the security needs of your enterprise are met completely and that security services are designed, delivered, and supported as an integral part of your IT Management infrastructure. The SABSA framework is of significance to all medium to large-scale organisations.