Skip to content

SABSA

SABSA provides a business-driven security architecture method that traces business requirements and attributes into security architecture.

ORSM complements this by making operational resilience an explicit architectural concern.

A useful distinction is:

  • SABSA: what should be designed from business requirements?
  • ORSM: how effectively does that design continue to support the organisation once it is operating?

ORSM measures such as complexity, recoverability, human friction and dependency resilience can provide an operational layer alongside SABSA's business attribute traceability.