From the course: Using SABSA to Architect Cloud Security

Unlock the full course today

Join today to access over 22,600 courses taught by industry experts or purchase this course individually.

Creating the logical architecture

Creating the logical architecture - SABSA Tutorial

From the course: Using SABSA to Architect Cloud Security

Start my 1-month free trial

Creating the logical architecture

- [Instructor] Having developed a SABSA conceptual architecture with a suggested attribute taxonomy, we can now start to develop the business-driven logical information security architecture for our deployment. At the logical layer of this architecture, we want to design a set of security policies which will mitigate risk to our attributes. These policies are then issued to each business unit, what SABSA would call a domain. The policies will be implemented in the business processes, supported by a business-driven set of security services. So for example, in order to meet a business requirement that financial expenditure is properly managed, the conceptual architecture would include the authorized attributes. The financial policy would state that certain individuals have financial delegation and that they have authority for expending up to a maximum amount. The financial system would then include the requirement for…

Contents