SABSA Study Guide: Questions With Easy-to-Follow
Solutions
Business driven requirements & strategy Correct Answer - contextual en
conceptual
Contextual Correct Answer - assets, opps and threats, business value chain,
org structure, inventory of buildings, time dependencies of business goals
Conceptual Correct Answer - business attributes, tax and profile, risk
management strategy objectives, strategys for process assurance, risk and
governance trust framework, domain framework, the time management
framework
Logical Correct Answer - inventory of information assets, risk management
policies, process maps and services, trust rlationships, domain maps, calendar
& timetable
Physial Correct Answer - data assets, risk management practices, process
machansms, human interface, nfra, process sched
Components- trademan Correct Answer - component assets (tools), risk
management components and standrds, human entitites: compomnts and
standards (job descrip.), locator components & standrds: nodes, addressses,
step timing and sequecng tools( tme sched)
Manager views Correct Answer - delivery and continuity management, opp
risk management , process delivery manage,et governance, relationship and
personnel manageent, environment maangmenet, time & performance
managmeent
Sabsa matrix Correct Answer - artefacts/deliverables
Management matrix, Correct Answer - actions
Inspectors Correct Answer - arch compoolete, rubust ffp, consistent
, Completeness Correct Answer - every business req for sec is met and the
residual risk is acceptable to the business apptetite
Justifcation Correct Answer - every oopration or technological sec element
can be justified by ref to a risk prioritised business req
Logical layer- dsigner Correct Answer - Policies: Domain policies, Service
Oriented arch, trust models
Physical arch Correct Answer - Procedures: Risk Management Rules &
procedures,
Component arch: Correct Answer - standards
Information asset value Correct Answer - accuracy & completeness,
timeliness and availability & relevance
Information assets Correct Answer - virtual, logical, not stored in specific
location. Context has meaning trhough org and presentation
What Correct Answer - assets
Why Correct Answer - risk and motivation factors
How Correct Answer - process factors
Who Correct Answer - people factors
Where Correct Answer - location factors
When Correct Answer - temporal factors
Business view Correct Answer - contextual
Architects view Correct Answer - conceptual
Designers view Correct Answer - logical arch
Solutions
Business driven requirements & strategy Correct Answer - contextual en
conceptual
Contextual Correct Answer - assets, opps and threats, business value chain,
org structure, inventory of buildings, time dependencies of business goals
Conceptual Correct Answer - business attributes, tax and profile, risk
management strategy objectives, strategys for process assurance, risk and
governance trust framework, domain framework, the time management
framework
Logical Correct Answer - inventory of information assets, risk management
policies, process maps and services, trust rlationships, domain maps, calendar
& timetable
Physial Correct Answer - data assets, risk management practices, process
machansms, human interface, nfra, process sched
Components- trademan Correct Answer - component assets (tools), risk
management components and standrds, human entitites: compomnts and
standards (job descrip.), locator components & standrds: nodes, addressses,
step timing and sequecng tools( tme sched)
Manager views Correct Answer - delivery and continuity management, opp
risk management , process delivery manage,et governance, relationship and
personnel manageent, environment maangmenet, time & performance
managmeent
Sabsa matrix Correct Answer - artefacts/deliverables
Management matrix, Correct Answer - actions
Inspectors Correct Answer - arch compoolete, rubust ffp, consistent
, Completeness Correct Answer - every business req for sec is met and the
residual risk is acceptable to the business apptetite
Justifcation Correct Answer - every oopration or technological sec element
can be justified by ref to a risk prioritised business req
Logical layer- dsigner Correct Answer - Policies: Domain policies, Service
Oriented arch, trust models
Physical arch Correct Answer - Procedures: Risk Management Rules &
procedures,
Component arch: Correct Answer - standards
Information asset value Correct Answer - accuracy & completeness,
timeliness and availability & relevance
Information assets Correct Answer - virtual, logical, not stored in specific
location. Context has meaning trhough org and presentation
What Correct Answer - assets
Why Correct Answer - risk and motivation factors
How Correct Answer - process factors
Who Correct Answer - people factors
Where Correct Answer - location factors
When Correct Answer - temporal factors
Business view Correct Answer - contextual
Architects view Correct Answer - conceptual
Designers view Correct Answer - logical arch
