SABSA F1 UPDATED ACTUAL Questions and CORRECT Answers
1. Overall, SABSA is a: methodology
2. COTS commercial ott the shelf
3. Standard ESA programs too much emphasis on tech, not business problems
fail because
4. Describe SABSA concept of Treatment of an organization as a single entity and aims to optimize
all parts of the organization in a coherent way that delivers improved
"Enterprise" performance
5. Describe the SABSA con- To support the business objectives relative to a specific business
cept of Security context and within a specific risk appetite.
6. Describe the SABSA con-
cept of Architecture Architecture supports business strategy
7. Describe the role of an ar-
chitectural Framework A consistent set of principles, policies, capabilities, and standards
that sets the direction and vision for the development and operation
of the organizations business information systems so as to ensure
8. List SABSA drivers &con- alignment with and support for the business needs
straints
Drivers and Constraints:
overall business goals for the system
the functional requirements of the system - what should it do?
The materials and/or components avail. For constructing systems
the env. In which the system will be built and used
9. Identify how SABSA re- the skills of the people who build the system
solves the historical, tacti- the skills of the people who will use the system
the costs incurred and benefits delivered
ensures the holistic, biggest picture is taken into account and how
and why they work together towards common business goals
, cal & silo-ed approach to
security
10. List the 7 primary features Feature > Advantage
& advantages of the SABSA Business Driven > Value-Assured
approach to Enterprise Se- Risk-Focused > Prioritized and proportional
curity Architecture Comprehensive > Scalable scope
Modular > Agility
Open-source > Free use, standard
Auditable > Demonstrates compliance
Transparent > Two-way traceability
11. List the benefits of an Ar-
chitecture Framework Managing Complexity
Maintaining integrity of design in large complex developments
providing a roadmap for all to follow
lowering the TCO
good integration of technical and procedural solutions to business
problems
attaining an appropriate balance between strategy, tactics, and
operations
12. List SABSA guiding princi- resolving conflicting objectives and priorities
ples
predictability, flexibility, and agility
Architecture must not presuppose any particular:
-cultures or operating regimes
-management style
-set of management processes
-management standards
-technical standards
-technology platforms
***Because all of these will change over time
13. a good framework will answer YES
, Is this architecture
compatible with/compli-
ant with
14. Architecture must meet Your own unique business reqs
business require-
ments
15. Architecture must pro-
vide to incorporate Flexibility to incorporate and pivot in these areas
choice and change of poli-
cy, standards, practices, or
legislation
16. A layered Framework is: a framework within which many people can work harmoniously and
all act toward the goal of a SINGLE design authority (NASCAR)
17. ESA Scope Must never happen bottoms up
resolves problems caused by a long history of piecemeal imple-
mentations
business strategy for security is closely linked to the goals of oper-
ational risk mgmt
Deals with conflicting objectives
18. As part of a business strat- Usability, interoperability, integration, supportability
egy, ESA must balance Fast time to market, scalability, reusability,
these:
Cost ettectiveness
19. Architecture needs a Holistic
approach
20. All the links in the chain
ensure that security is provided through a fully integrated systems
1. Overall, SABSA is a: methodology
2. COTS commercial ott the shelf
3. Standard ESA programs too much emphasis on tech, not business problems
fail because
4. Describe SABSA concept of Treatment of an organization as a single entity and aims to optimize
all parts of the organization in a coherent way that delivers improved
"Enterprise" performance
5. Describe the SABSA con- To support the business objectives relative to a specific business
cept of Security context and within a specific risk appetite.
6. Describe the SABSA con-
cept of Architecture Architecture supports business strategy
7. Describe the role of an ar-
chitectural Framework A consistent set of principles, policies, capabilities, and standards
that sets the direction and vision for the development and operation
of the organizations business information systems so as to ensure
8. List SABSA drivers &con- alignment with and support for the business needs
straints
Drivers and Constraints:
overall business goals for the system
the functional requirements of the system - what should it do?
The materials and/or components avail. For constructing systems
the env. In which the system will be built and used
9. Identify how SABSA re- the skills of the people who build the system
solves the historical, tacti- the skills of the people who will use the system
the costs incurred and benefits delivered
ensures the holistic, biggest picture is taken into account and how
and why they work together towards common business goals
, cal & silo-ed approach to
security
10. List the 7 primary features Feature > Advantage
& advantages of the SABSA Business Driven > Value-Assured
approach to Enterprise Se- Risk-Focused > Prioritized and proportional
curity Architecture Comprehensive > Scalable scope
Modular > Agility
Open-source > Free use, standard
Auditable > Demonstrates compliance
Transparent > Two-way traceability
11. List the benefits of an Ar-
chitecture Framework Managing Complexity
Maintaining integrity of design in large complex developments
providing a roadmap for all to follow
lowering the TCO
good integration of technical and procedural solutions to business
problems
attaining an appropriate balance between strategy, tactics, and
operations
12. List SABSA guiding princi- resolving conflicting objectives and priorities
ples
predictability, flexibility, and agility
Architecture must not presuppose any particular:
-cultures or operating regimes
-management style
-set of management processes
-management standards
-technical standards
-technology platforms
***Because all of these will change over time
13. a good framework will answer YES
, Is this architecture
compatible with/compli-
ant with
14. Architecture must meet Your own unique business reqs
business require-
ments
15. Architecture must pro-
vide to incorporate Flexibility to incorporate and pivot in these areas
choice and change of poli-
cy, standards, practices, or
legislation
16. A layered Framework is: a framework within which many people can work harmoniously and
all act toward the goal of a SINGLE design authority (NASCAR)
17. ESA Scope Must never happen bottoms up
resolves problems caused by a long history of piecemeal imple-
mentations
business strategy for security is closely linked to the goals of oper-
ational risk mgmt
Deals with conflicting objectives
18. As part of a business strat- Usability, interoperability, integration, supportability
egy, ESA must balance Fast time to market, scalability, reusability,
these:
Cost ettectiveness
19. Architecture needs a Holistic
approach
20. All the links in the chain
ensure that security is provided through a fully integrated systems
