SABSA CHARTERED FOUNDATION (SCF) | EXAM REVISION PACK
2026/2027 | QUESTIONS AND 100% VERIFIED ANSWERS | PASS
GUARANTEED
Q1. What does SABSA stand for? ANSWER Sherwood Applied Business
Security Architecture
Q2. What is the core philosophy of SABSA? ANSWER Business-driven security
architecture
Q3. SABSA is described as a "top-to-bottom" framework. What does this
mean? ANSWER It starts from business requirements and traces down to
technical controls
Q4. What is the primary purpose of enterprise security architecture?
ANSWER To align security with business goals and enable secure business
operations
Q5. What makes SABSA different from purely technical security frameworks?
ANSWER It begins with business requirements rather than technical controls
Q6. What is the key term that describes SABSA's approach to security?
ANSWER Business-driven
Q7. SABSA can be used as a compliance framework for complex sets of
standards. True or False? ANSWER True
Q8. Which framework is SABSA commonly used alongside as a security
parallel? ANSWER Zachman Framework
Q9. SABSA integrates with which of the following frameworks? ANSWER ITIL,
ISO 27000 series, COBIT, and TOGAF
Q10. What type of framework is SABSA? ANSWER An open-use security
architecture framework and methodology
,Q11. Who originally developed SABSA? ANSWER John Sherwood, Andrew
Clark, and David Lynas
Q12. What is the SABSA Institute's role? ANSWER It is the governing body for
SABSA certification and standards
Q13. What does "open-use" mean in the context of SABSA? ANSWER It is
openly available and not proprietary
Q14. Which organization has adopted SABSA as its standard for Information
Assurance? ANSWER UK Ministry of Defence
Q15. ISACA documents SABSA as what type of framework? ANSWER A
recommended governance framework
Q16. What is the SABSA certification path? ANSWER SCF → SCP → SCM
Q17. What does SCF stand for? ANSWER SABSA Chartered Foundation
Q18. What does SCP stand for? ANSWER SABSA Chartered Practitioner
Q19. What does SCM stand for? ANSWER SABSA Chartered Master
Q20. How many modules are in the Foundation level? ANSWER Two (F1 and
F2)
Q21. How many questions are in each Foundation exam? ANSWER 48
multiple-choice questions
Q22. What is the pass mark for each Foundation exam? ANSWER 75%
Q23. How long is each Foundation exam? ANSWER 60 minutes
Q24. Can candidates get extra time if English is not their first language?
ANSWER Yes, typically an additional 15 minutes per module
Q25. Are the Foundation exams open-book or closed-book? ANSWER Closed-
book
Q26. Does SCF certification expire? ANSWER No, it remains valid indefinitely
Q27. Does SCF require CPE (Continuing Professional Education) credits?
ANSWER No
Q28. What is the prerequisite for taking the SCF exam? ANSWER Completion
of an accredited SABSA Foundation training course
, Q29. How many days is the SABSA Foundation training course? ANSWER 5
days
Q30. What is the purpose of the SABSA Foundation training? ANSWER To
create broad knowledge and understanding of the SABSA method,
frameworks, concepts, models, and techniques
SECTION 2: THE SABSA MODEL & MATRIX (Questions 31–60)
Q31. How many layers does the SABSA model have? ANSWER Six layers
Q32. What are the six layers of the SABSA model? ANSWER Contextual,
Conceptual, Logical, Physical, Component, and Operational
Q33. What is the "Business View" in SABSA? ANSWER The Contextual
Architecture layer
Q34. What is the "Architect's View" in SABSA? ANSWER The Conceptual
Architecture layer
Q35. What is the "Designer's View" in SABSA? ANSWER The Logical
Architecture layer
Q36. What is the "Builder's View" in SABSA? ANSWER The Physical
Architecture layer
Q37. What is the "Tradesman's View" in SABSA? ANSWER The Component
Architecture layer
Q38. What is the "Service Manager's View" in SABSA? ANSWER The
Operational Architecture layer
Q39. Which layer addresses "What business needs to be protected?"
ANSWER Contextual (Business View)
Q40. Which layer addresses "What security services are needed?" ANSWER
Conceptual (Architect's View)
Q41. Which layer addresses "How do the security services work together?"
ANSWER Logical (Designer's View)
Q42. Which layer addresses "What technologies implement the services?"
ANSWER Physical (Builder's View)
2026/2027 | QUESTIONS AND 100% VERIFIED ANSWERS | PASS
GUARANTEED
Q1. What does SABSA stand for? ANSWER Sherwood Applied Business
Security Architecture
Q2. What is the core philosophy of SABSA? ANSWER Business-driven security
architecture
Q3. SABSA is described as a "top-to-bottom" framework. What does this
mean? ANSWER It starts from business requirements and traces down to
technical controls
Q4. What is the primary purpose of enterprise security architecture?
ANSWER To align security with business goals and enable secure business
operations
Q5. What makes SABSA different from purely technical security frameworks?
ANSWER It begins with business requirements rather than technical controls
Q6. What is the key term that describes SABSA's approach to security?
ANSWER Business-driven
Q7. SABSA can be used as a compliance framework for complex sets of
standards. True or False? ANSWER True
Q8. Which framework is SABSA commonly used alongside as a security
parallel? ANSWER Zachman Framework
Q9. SABSA integrates with which of the following frameworks? ANSWER ITIL,
ISO 27000 series, COBIT, and TOGAF
Q10. What type of framework is SABSA? ANSWER An open-use security
architecture framework and methodology
,Q11. Who originally developed SABSA? ANSWER John Sherwood, Andrew
Clark, and David Lynas
Q12. What is the SABSA Institute's role? ANSWER It is the governing body for
SABSA certification and standards
Q13. What does "open-use" mean in the context of SABSA? ANSWER It is
openly available and not proprietary
Q14. Which organization has adopted SABSA as its standard for Information
Assurance? ANSWER UK Ministry of Defence
Q15. ISACA documents SABSA as what type of framework? ANSWER A
recommended governance framework
Q16. What is the SABSA certification path? ANSWER SCF → SCP → SCM
Q17. What does SCF stand for? ANSWER SABSA Chartered Foundation
Q18. What does SCP stand for? ANSWER SABSA Chartered Practitioner
Q19. What does SCM stand for? ANSWER SABSA Chartered Master
Q20. How many modules are in the Foundation level? ANSWER Two (F1 and
F2)
Q21. How many questions are in each Foundation exam? ANSWER 48
multiple-choice questions
Q22. What is the pass mark for each Foundation exam? ANSWER 75%
Q23. How long is each Foundation exam? ANSWER 60 minutes
Q24. Can candidates get extra time if English is not their first language?
ANSWER Yes, typically an additional 15 minutes per module
Q25. Are the Foundation exams open-book or closed-book? ANSWER Closed-
book
Q26. Does SCF certification expire? ANSWER No, it remains valid indefinitely
Q27. Does SCF require CPE (Continuing Professional Education) credits?
ANSWER No
Q28. What is the prerequisite for taking the SCF exam? ANSWER Completion
of an accredited SABSA Foundation training course
, Q29. How many days is the SABSA Foundation training course? ANSWER 5
days
Q30. What is the purpose of the SABSA Foundation training? ANSWER To
create broad knowledge and understanding of the SABSA method,
frameworks, concepts, models, and techniques
SECTION 2: THE SABSA MODEL & MATRIX (Questions 31–60)
Q31. How many layers does the SABSA model have? ANSWER Six layers
Q32. What are the six layers of the SABSA model? ANSWER Contextual,
Conceptual, Logical, Physical, Component, and Operational
Q33. What is the "Business View" in SABSA? ANSWER The Contextual
Architecture layer
Q34. What is the "Architect's View" in SABSA? ANSWER The Conceptual
Architecture layer
Q35. What is the "Designer's View" in SABSA? ANSWER The Logical
Architecture layer
Q36. What is the "Builder's View" in SABSA? ANSWER The Physical
Architecture layer
Q37. What is the "Tradesman's View" in SABSA? ANSWER The Component
Architecture layer
Q38. What is the "Service Manager's View" in SABSA? ANSWER The
Operational Architecture layer
Q39. Which layer addresses "What business needs to be protected?"
ANSWER Contextual (Business View)
Q40. Which layer addresses "What security services are needed?" ANSWER
Conceptual (Architect's View)
Q41. Which layer addresses "How do the security services work together?"
ANSWER Logical (Designer's View)
Q42. Which layer addresses "What technologies implement the services?"
ANSWER Physical (Builder's View)
