1
Sabsa Questions with Answers (100% Correct
Answers)
Describe the role of attributes performance thresholds in removing subjectivity
of risk assessments Answer: - Primary KRI sets acceptable/unacceptable risk
appetite ranges
- Secondary KRIs are used to trigger a warning system that things are going
awry
List the 6 views of SABSA Architecture Answer: Business View - Contextual
Arch - goals
Architects View - Conceptual Arch - framework
Designers View - Logical Arch - process/flow
Builders View - Physical Arch - rules/procedures
Tradesman's View - Component Arch - components/people
Managers View - Management Arch - management
Name the 6 layers of the SABSA Architecture Matrix Answer: What - The
assets, goals and objectives to be protected and enhanced
Why - The risk and opportunity motivation
How - The processes required to achieve security
Who - The people and organizational aspects of security
Where - The locations where we are applying security
When - The time related aspects
Label the 6 columns of the SABSA Matrices Answer: Assets (What)
,2
Motivation (Why)
Process (How)
People (Who)
Location (Where)
Time (When)
List the 6 rows of the SABSA architecture Matrix Answer: Contextual
Conceptual
Logical
Physical
Component
Management (this one encapsulates all)
What within the Inspectors View provides assurance of architecuture? Answer:
- complete
- robust
- fit for purpose
- consistent
Define the traceability flow from business requirements to Attributes Answer: -
small credible steps, not big jumps
- business requirements are traced to attributes by using an abstraction of the
real business requirement and vice versa
Define SABSA Attributes Answer: Attributes are a conceptual abstraction of
real business requirements
, 3
Describe the rules & features of Attributes Answer: - Tangible or intangible
- Meaningful name and definition, uniq. to org
- Requires a measurement approach and metric
- Validated by business stakeholders - Performance targets are used for
reporting and SLA
- Link between biz reqs and technology and process design
- picklist
Define Attributes Taxonomy and Profile Answer: Taxonomy
- Name
- Definition
- Classification
Attribute Profile
- Measurement approach
- Metric
- Performance target
Identify elements of Attributes requiring customisation Answer: Customized
per local and business needs
- Name
- Definition
- Classification
- Measurement approach
Sabsa Questions with Answers (100% Correct
Answers)
Describe the role of attributes performance thresholds in removing subjectivity
of risk assessments Answer: - Primary KRI sets acceptable/unacceptable risk
appetite ranges
- Secondary KRIs are used to trigger a warning system that things are going
awry
List the 6 views of SABSA Architecture Answer: Business View - Contextual
Arch - goals
Architects View - Conceptual Arch - framework
Designers View - Logical Arch - process/flow
Builders View - Physical Arch - rules/procedures
Tradesman's View - Component Arch - components/people
Managers View - Management Arch - management
Name the 6 layers of the SABSA Architecture Matrix Answer: What - The
assets, goals and objectives to be protected and enhanced
Why - The risk and opportunity motivation
How - The processes required to achieve security
Who - The people and organizational aspects of security
Where - The locations where we are applying security
When - The time related aspects
Label the 6 columns of the SABSA Matrices Answer: Assets (What)
,2
Motivation (Why)
Process (How)
People (Who)
Location (Where)
Time (When)
List the 6 rows of the SABSA architecture Matrix Answer: Contextual
Conceptual
Logical
Physical
Component
Management (this one encapsulates all)
What within the Inspectors View provides assurance of architecuture? Answer:
- complete
- robust
- fit for purpose
- consistent
Define the traceability flow from business requirements to Attributes Answer: -
small credible steps, not big jumps
- business requirements are traced to attributes by using an abstraction of the
real business requirement and vice versa
Define SABSA Attributes Answer: Attributes are a conceptual abstraction of
real business requirements
, 3
Describe the rules & features of Attributes Answer: - Tangible or intangible
- Meaningful name and definition, uniq. to org
- Requires a measurement approach and metric
- Validated by business stakeholders - Performance targets are used for
reporting and SLA
- Link between biz reqs and technology and process design
- picklist
Define Attributes Taxonomy and Profile Answer: Taxonomy
- Name
- Definition
- Classification
Attribute Profile
- Measurement approach
- Metric
- Performance target
Identify elements of Attributes requiring customisation Answer: Customized
per local and business needs
- Name
- Definition
- Classification
- Measurement approach
