Focuses on the actual technologies, products, and mechanisms used to deliver security.
The SABSA Security Architecture consists of six layers, each representing a distinct aspect of security:
Addresses day-to-day operations and performance monitoring to ensure the architecture remains effective. The SABSA Lifecycle
While often compared to other models, SABSA is highly compatible and often used in tandem with them.
Traditional security frameworks (like ISO 27001 or NIST) tell you what to do. Technical controls (firewalls, EDR, SIEM) tell you how to do it. But neither answers the most important question: