Enterprise Architecture Framework - Zachman Institute for Framework Advancement SABSA Framework for security architecture design Range Statement The Range Statement relates to the unit of competency as a whole. It allows for different work environments and situations that may affect performance. Security architecture The open group architecture framework (TOGAF) frameworks and Enterprise information security architecture (EISA) methodologies includes Sherwood applied business security architecture but not limited to: Information technology infrastructure library (ITIL) Control objectives for information and related technologies (COBIT) National Institute of Standards and Technology (NIST) Cybersecurity framework Enterprise Architecture Framework - Zachman Institute for Framework Advancement Appropriate personnel Cyber security paraprofessional includes but not limited Cyber security manager to: External consultants Relevant managers Business stakeholders Security policy includes Breech consequences but not limited to: Policy enforcement User Access Security profiles Passwords E-mail use Internet use requirements Back-up and recovery processes Intrusion detection processes and procedures Remote Access Change management Internal training Random work place audits process strategies includes but not limited Incentives for work cyber security change practices to: Weekly staff security challenges Layered model of Contextual (Business context) security architecture Conceptual (Security strategy) includes but not limited Logical (High level security design) to: Physical (Part of detailed design) Component (Part of detailed design) Operational design All the above are based on the SABSA
Enterprise Architecture Framework - Zachman Institute for Framework Advancement SABSA Framework for security architecture design Range Statement The Range Statement relates to the unit of competency as a whole. It allows for different work environments and situations that may affect performance. Security architecture frameworks and methodologies includes but not limited to: The open group architecture framework (TOGAF) Enterprise information security architecture (EISA) Sherwood applied business security architecture Information technology infrastructure library (ITIL) Control objectives for information and related technologies (COBIT) National Institute of Standards and Technology (NIST) Cybersecurity framework Enterprise Architecture Framework - Zachman Institute for Framework Advancement Appropriate personnel includes but not limited to: Cyber security paraprofessional Cyber security manager External consultants Relevant managers Business stakeholders Security policy includes but not limited to: Breech consequences Policy enforcement User Access Security profiles Passwords E-mail use Internet use requirements Back-up and recovery processes Intrusion detection processes and procedures Remote Access Change management process strategies includes but not limited to: Internal training Random work place audits Incentives for work cyber security change practices Weekly staff security challenges Layered model of security architecture includes but not limited to: Contextual (Business context) Conceptual (Security strategy) Logical (High level security design) Physical (Part of detailed design) Component (Part of detailed design) Operational design All the above are based on the SABSA
currCyber%20Security%20Advanced%20Diploma22445VIC.docx