SABSA
What is SABSA?
SABSA (Sherwood Applied Business Security Architecture) is the internationally-acclaimed "best practice" framework for delivering cohesive information security solutions to business and government. SABSA is to security management what ITIL is to service management or PRINCE2 is to project management.
SABSA is a six-layer model covering all four parts of the IT lifecycle: Strategy, Design, Implementation and Management & Operations. SABSA ensures the security needs of the enterprise are met completely and that security services are designed, delivered, and supported as an integral part of the IT Management infrastructure.

ALC is an Accredited SABSA Education Provider for Asia-Pacific.
SABSA Public Training
ALC offers the world’s most successful security architecture - SABSA
It is the leading open-use best practice method for delivering cohesive information security solutions to enterprises. The SABSA framework ensures that the security needs of your organisation are met completely and are designed, delivered and supported as an integral part of your IT management infrastructure.
This 5-day Foundation Certificate program has been designed to provide participants with a thorough coverage of the knowledge required for the SABSA Foundation Level Certificate. It is structured in two modules which can be taken together or separately according to your needs:
Module F1: Security Strategy & Planning (2 Days)
Module F2: Security Service Management (3 Days)
This is most comprehensive and thorough training program available in this area. Anyone can gain benefit from SABSA:
- CIO / CISO / CRO / CIRO
- IT Strategists and Planners
- IT Architects
- IT Development Managers and
Project Leaders - Software Managers and Architects
- Computer / Information Security
Managers, Advisors, Consultants
& Practitioners - IT Line Managers
- IT Service Delivery Managers
- Risk Managers
- Internal and External Auditors
SABSA Practitioner Level course have recently been developed and added to our training schedule:
Module PM1: SABSA Assurance Management (2 Days)
Module PM2: SABSA Operational Risk Management (3 Days)
Module PT1: SABSA Identity and Access Management Architecture (3 Days)
Module PT2: SABSA Network Security Architecture and Design (2 Days)
For further information please download the SABSA Certification Roadmap or email learn@alc-group.com
SABSA Background
Information Security presents business and IT management with complex challenges. Not surprisingly, security solutions often end up being acquired on a piecemeal basis - a requirement arises, a specification is developed, a solution is sought. The inevitable result is an ad hoc mixture of technical solutions each independently designed and supported with no guarantee of compatibility or interoperability and with no necessary alignment with the goals of the business. The consequences are many, including an inordinately high cost of ownership for delivery and support of security services and security management.
SABSA (Sherwood Applied Business Security Architecture) provides a long-awaited solution.
A key function of any architecture is to provide a framework within which technical and operational complexity can be managed successfully. This is the very essence of SABSA. The SABSA framework has evolved since 1995 as a holistic business-driven approach for delivering cohesive security solutions to business and government. SABSA is a six-layer model covering all four parts of the IT lifecycle: Strategy, Design, Implementation and Management & Operations. SABSA ensures the security needs of your enterprise are met completely and that security services are designed, delivered, and supported as an integral part of your IT Management infrastructure. The SABSA framework is of significance to all medium to large-scale organisations.

