Back to top

The SABSA framework consists of several key components that work together to provide a comprehensive approach to enterprise architecture. These components include:

Unlike prescriptive standards such as ISO 27001 or technical control libraries like NIST, SABSA is a and a lifecycle methodology . It does not tell you what specific product to buy; instead, it provides a structured approach (a "how-to") for designing a security architecture from the ground up, starting with the business vision.

SABSA stands for . It is a globally recognized, open-standard framework and methodology used to develop risk-driven enterprise information security architectures.