SABSA Advanced

What is SABSA®?
SABSA stands for Sherwood Applied Business Security Architecture and is a new ‘best practice’ method for obtaining information security solutions within an organization. It is being used by organizations and governments worldwide.

The SABSA model follows closely the work done by John A. Zachman in developing a model for Enterprise Architecture. SABSA is to Security Management what ITIL is to Service Management, PRINCE2 to Project Management and TOGAF to Enterprise Architecture.

Combine the best of different methods!
Most organizations are already familiar with norms and standards like COBIT, BSI, ISF and the Code of Information Security. Most Security Architects gratefully make use of them. The SABSA approach complements these popular norms and standards on areas where they fail. SABSA creates a solution with which you can use the best of all different methods.

Implementing SABSA
The average time to implement SABSA is one to one and a half year. It depends on the type of organization, the degree of prework and the availability of knowledge in the organization.

Who uses SABSA?
SABSA is already the standard, or undergoing adoption and implementations worldwide in many major banks (including the European Central Bank), telecommunications companies, healthcare organisations, academic institutions, aviation/engineering industries, and governments (including the UK Ministry of Defence).

Get certified!
The SABSA certification framework is based upon world-leading educational best practices. There are 3 certification levels that indicate stages of proficiency, from knowledge and understanding of the subject up to demonstration of the advanced competencies required of a master of the profession:

• SABSA Foundation
• SABSA Advanced
  
• SABSA Master

Capability assurance
The SABSA certification framework is a comprehensive, competencies-based testing programme that provides employers and peers with far greater assurance and confidence that employees, job candidates, service providers and contractors have the professional capability to meet the needs of your particular business to design, deliver, and manage Business Security Architecture. It tests professional proficiency in all aspects of Enterprise Security Architecture as delivered by the SABSA Method.

The competencies framework, and its associated training programme, go much further than other certification efforts, which are largely knowledge-based. The SABSA programme is designed to develop and enhance professional capabilities in a measurable way.

SABSA recognises that after attaining the Foundation skills the architect's career diversifies into a series of specialisms. To best meet the diverse needs and increased degree of specialism required of a professional Enterprise Security architect, the SABSA Advanced certificate test modules are organised into 5 professional roadmap streams:

• SABSA Advanced: Risk Assurance & Governance (A1)
• SABSA Advanced: Service Excellence (A2)
• SABSA Advanced: Architectural Design (A3)
• SABSA Advanced: Incident, Monitoring & Investigations Architecture (A4)
• SABSA Advanced: Business Continuity & Crisis Management (A5)

Each of these career roadmaps enables the architect to choose the specialisms most suited to the needs of his career and of his employer. SABSA certification will also enable you to create a specific career roadmap to plan the advancement of your career in the architecture-related specialisms most suited to your needs, and to demonstrate your increasing competency, thus enabling you to differentiate yourself from non-SABSA certified professionals.

At this moment only the roadmaps ‘Risk Assurance & Governance’, 'Service Excellence' and ‘Architectual Design’ are organized in Europe. The other roadmap streams will follow in a later stage.

Who should attend?

• CIO / CISO / CRO / CIRO
• IT Strategists and Planners
• IT Architects
• IT Development Managers and Project Leaders
• Software Managers and Architects
• Computer / Information Security Managers, Advisors, Consultants & Practitioners
• IT Line Managers
• IT Service Delivery Managers
• Risk Managers
• Internal and External Auditors

Accredited education partners
Official SABSA training is delivered by accredited education partners internationally, each of which meets stringent criteria for quality of delivery and presenter experience. All official SABSA trainings delivered by accredited SABSA education partners are presented by certified SABSA Masters with extensive relevant experience.

What a course attendee will take away

• A comprehensive knowledge of the principles and practice of assurance management within the SABSA framework.
• A plan for implementing and managing an assurance programme based on best-practice methods, standards and tools and linked directly to the SABSA business attributes profile.
• A practical SABSA-based approach to assuring business processes and systems through monitoring, measuring, benchmarking, testing and continuous improvement.

Pre-Requisite Knowledge
There are no pre-requisites for attending the SABSA Advanced trainings or for sitting the SABSA institute examination on completion of the training. However, attendees will probably benefit most if they have some previous knowledge of the SABSA framework, and for those wishing to be awarded the SABSA Chartered Practitioner certificate, they will need to complete the SABSA Chartered Foundation certificate before the Practitioner award can be made.

Methodology
The SABSA Advanced trainings consist of lectures and workshop sessions, supplemented by case studies drawn from a combination of published real life examples and/or practical experience. In the workshops attendees will work in small groups to synthesise ideas and strategies and to apply the material in the context of case studies and simulations. Open forum discussions will also feature where appropriate.

Lecture content is naturally less intense than in Foundation classes, with more emphasis on practical work. The SABSA Advanced trainings focus heavily on developing the skills and knowledge for a practitioner through hands-on workshop sessions and discussions, so as to provide the appropriate balance and emphasis on practice rather than theory.

For courses in Dutch, please have a look at www.imf-online.com.