As we begin to wrap up 2024 and look forward excitedly to the holiday season and the new year ahead, The SABSA Institute is pleased to announce a special achievement and major milestone that we have accomplished this year:
The SABSA Institute has now surpassed 1000 SABSA Chartered Architects in the UK.
We are extremely proud and happy to share this good news and wonderful achievement for 2024 with everyone, and we wish to thank all of you for your support. Thank you and well done.
The SABSA Institute Working Group in the ArchiMate Forum, Prague
Steven Bradley, Lead of the Modelling SABSA with ArchiMate (MSA) Working Group represented The SABSA Institute at the Review Meeting for ArchiMate Feedback Campaign. The event was organised by the Working Group of the ArchiMate Forum and held at Hotel Hoffmeister in Prague from 18th to 19th November. Steven was invited by ArchiMate Forum Director Kelly Cannon to participate in this meeting as an observer.
In this session, ArchiMate Forum members reviewed recommendations for updates to the metamodel for ArchiMate 4.0. Steven presented his ideas for improving the metamodel to make it more extensible and described security through SABSA concepts.
Steven reported a positive impression from both the ArchiMate Forum Committee and the User Group that security is high on the agenda for ArchiMate 4.0. We are optimistic that our proposals will be considered favourably and inform the final implementation.
‘I was granted a generous timeslot in the schedule to present and explain the SABSA wish list for ArchiMate v4.0. Although this was just the first stage of the decision-making process, the Forum generally appreciated the thought and effort behind the proposal and now have a good understanding of the drivers and benefits of a deeper security integration. We’re looking forward to following its progress in 2025. The discussions with the Czech User Community also highlighted well the appetite for the development of the security perspective.’
– Steven Bradley, Lead of MSA Working Group
‘The Forum Members had a great meeting overall, and there was a lot of beneficial conversation about the future of the standard. Since returning, they have been working through the comments received in The ArchiMate Community. I expect that we will be through most, if not all, of the comments before the end of the year. The Open Group publication process takes time and we are aiming for a mid-2025 release.‘
– Kelly Cannon, Leader of ArchiMate Forum
Refresh of T100 Modelling SABSA with ArchiMate
The SABSA Institute was approached at the beginning of the year by The Open Group to look into refreshing ‘T100 Modelling SABSA with ArchiMate’ to reflect the changes made in ArchiMate 3.2. The MSA Working Group accepted the invitation to refresh their original work and the updated paper is now undergoing an internal review before its release to our members.
T100 describes how security architecture concepts can be expressed using ArchiMate, The Open Group’s widely adopted Enterprise Architecture modelling language. It extends and updates previous versions of this paper to reflect changes made in the ArchiMate 3.2 minor release as well as the latest versions of reference documents.
A special Thank You here and much appreciation to the MSA Working Group members: Jonathan Bentley, Murray Booth, Carlos Dominguez, Patrick Dunstan, Duncan Hart, Gregory Hoel, Renil Lambert, Richard Morgan and Steven Bradley.
SABSA World
SABSA World is the banner under which SABSA community members and practitioners can organise events and gatherings to connect with one another. SABSA World can be an evening talk, a weekday lunch, a study group or a casual social networking event and may be regularly scheduled or spontaneous and occasional.
All SABSA World activities are intended to be a welcoming space for everyone – and all are welcome – seasoned SABSA practitioners or just the SABSA-curious alike.
Upcoming SABSA World events
Australia
SABSA World Melbourne – Monthly security architect’s lunch
Melbourne, Australia
Tuesday, 28th January
The next SABSA World Melbourne Monthly Security Architect’s Lunch is scheduled to take place on 28th January, Tuesday at Sergy Boy on Collins Street at noon. To join this event, please register your interest here. For further information, send us an email to find out more.
And possibly, London in 2025
Beaumont City Tower, 40 Basinghall St, London EC2V 5DE (To be confirmed)
The SABSA Institute is looking to organise a SABSA World London event in mid January 2025.
We have a hosting venue available with an approximate seating capacity of about 25 to 30 people in addition to a reception and kitchen area, and we are looking for speakers who would be keen to present.
With enough support and participants who sign up, this may very well be a fantastic start to future regular SABSA World London events in 2025. Interested parties (both speakers and/ or participants) are warmly welcomed to reach out to Simon Cross.
Do note that initial places will be limited, as such, do register your interest to attend early via email.
Tentative date: 14th January 2025 (To be confirmed)
SABSA World Groups
The following are pages for SABSA World community groups which organise events and provide resources to security architects around the world. For more information on how to join, help, host or participate in SABSA World community groups, please visit:
Australia
SABSA World Australia is a community project focused on the Australian SABSA Community, but is open to all.
Links to SABSA World Australia pages, events, and resources can be found via the Linktree: https://linktr.ee/sabsaworldaustralia
Europe
For information on upcoming events in Europe, follow SABSA World Belgium.
SABSA Practitioner Study Group
The SABSA Practitioner Study Group was established by the APAC Liaison Group (LG) for aspiring SABSA Practitioners. There is a growing need for more Practitioners in the industry, and we hope this initiative will lead to an increase in paper submissions and successful certifications.
The first Study Group meeting was held on 11th December via Teams and led by Rahul Lobo with the objective of providing an environment of mutual support amongst those completing their SABSA Practitioner assignment submissions. This first meeting was attended by SABSA Master Robert Laurie who offered advice to attendees, as well as guidance on writing a practitioner paper.
SABSA Practitioner Study Group attendees included:
(Clockwise from top left)
- Robert Laurie
- Rahul Lobo
- Gareth Watters
- Sreeja Krishna
- Kirk Nicholls
- Andra Cimpean
- Nasih Absulsamad
- Bruce Large
- David Lang
The next Study Group meeting is scheduled for 23rd January and interested members who wish to join the Study Group may email Rahul.
Outside of the regularly scheduled meetings, those who are looking for support can also reach out via the Practitioner Paper Study channels in the SABSA Speakeasy server on Discord: https://discord.gg/ZZRkCxGF8Z
What do Liaison Group members do?
Joining an LG is a volunteer commitment for those who are interested to take an active role in connecting and growing the global community of SABSA practitioners.
General expectations of LG members include:
- Growing active community engagement with TSI Members
- Encouraging TSI Members’ participation in TSI projects
- Engaging with TSI Members to understand their needs
- Creating bonds of mutual support between LGs
- Advising the Board on how to best serve TSI Members
- Advocating for TSI Member interests to the Board
- Attending LG regular meetings
Interested in joining a Liaison Group?
Both EMEA & NA and APAC LGs welcome expressions of interest from community members who are keen to join. TSI Members can join either group, based on their time zone, location or preference.
Members who would like to join an LG are encouraged to write in to:
EMEA & NA LG
LG-emea@sabsainstitute.org
APAC LG
LG-apac@sabsainstitute.org
Security Architecture: Community Research Survey
Australian Security Architects and community leaders Lidia Giuliano and Sarah Young are undertaking a research project to better understand the global Security Architect community.
By collecting survey data from practicing security architects, the project aims to publish a white paper which will help the industry understand the current state such as wages, experience, ways of working and provide future recommendations and a framework. The paper will also highlight pathways for joining the profession and how to grow and recruit for this role. The anonymised response dataset will also be published for use by other researchers.
The survey has been peer reviewed by fellow security architects to ensure appropriate depth, breadth and quality of questions. It is divided into four areas: persona demographics, professional background, security architect demographics, and experience and duties.
The survey currently has over 200 responses with a goal of 1000 responses globally. Early responses have been informative, but more responses are needed to ensure quality and accuracy.
“I have seen companies build a security architecture practice without putting in the foundations to ensure it adds value. Whether it’s at the enterprise or solution level. I have seen people struggle understanding the pathway into this profession as well as recruiters and employers knowing what experience or knowledge is required.
I am really excited by the responses so far and hope it will have a massive impact for all current and future security architects.”
– Lidia
TSI members are strongly encouraged to respond to the anonymous survey and include your SABSA training and community experience in your response.
Security Architecture: Community Research Survey
https://forms.gle/MVfEC2bbDkgNEaHY9
TSI Webinars
The SABSA Institute will be organising a number of Webinars in the first quarter of 2025. Experts in applying SABSA will showcase how they have used and extended the SABSA framework to deliver traceable security architecture that supports business objectives.
If you would like to be a speaker for a Webinar in 2025, please contact Robert Laurie.
TSI Training and Certification
SABSA training is available through the TSI network of Accredited Education Partners (AEPs). Our training covers all levels in the SABSA training continuum from Foundation to Practitioner.
Certification by TSI is competency-based and requires candidates to demonstrate the knowledge, skills and abilities required to use the SABSA method in the real world. SABSA Certification Examinations can only be taken after completion of training provided by a TSI AEP.
For more details, please refer to the TSI AEP website.
Upcoming Courses
A schedule of all upcoming SABSA-approved (non-certification based) and SABSA official (certification-based) courses can be found on our website here.
Recommended Reading
A monthly selection of material assembled by the Publications Team for the SABSA community.
Community Video
Using SABSA to Architect Zero Trust Networks – Chris Blunt
In 2014, Google threw away its traditional approach to securing its services and reimagined what security should look like to be truly effective in today’s world of distributed teams, systems, and applications. But is it practical for an organisation without the resources of Microsoft, Amazon Web Service and Google to adopt these concepts?
This talk provides a brief overview of the zero-trust concepts before exploring how SABSA can be used to architect zero-trust networks. It discusses the real-world applications of zero-trust, together with some of the challenges and how they might be overcome.
SABSA at Work
TSI SW106 Debiasing the Security Architect
Debiasing the Security Architect: Improving Cybersecurity Architectural Decision-Making is authored by SABSA Master Patrick Dunstan. In the context of SABSA security architecture, biases can adversely influence how security architects make good risk decisions and protect business assets.
Poor decision-making in this respect can be costly and jeopardise the overall value proposition of a security architecture. This paper explores the enhancement of decision-making and bias within security architecture.
SABSA Webinar
SABSA Australia Community Chat
A relaxed discussion between (clockwise from top left) Bruce Large, Harley Aw, Robert Laurie and Kirk Nicholls, regarding the SABSA community. The conversation focuses on new attendees’ experiences at COSAC Conferences; COSAC APAC held in Melbourne, Australia as well as COSAC Naas, held in Ireland. This lively discussion also touches on other community resources such as the SABSA Speakeasy server on Discord and other security architecture interest groups relevant to SABSA security architects.
SABSA Publishing
This is an initial call for expressions of interest to join the SABSA Publications Team. We would like to invite you to reach out to us if you’re keen to be a volunteer or have your materials published by us. Those who submit their EOIs will be contacted by a member of the Publications Team to schedule an interview.
Authors
We welcome all submissions and are particularly interested in working with those who have successfully passed the examination for Practitioner courses (A1 and A3).
Those interested in having their work published by The SABSA Institute may submit their details here.
Publications Team Volunteers
Document editor
Technical editor
Document composer (LaTeX software typesetter)
Graphic designer
Technical document translator
Project manager
Video editor
Audio editor
Anyone who wishes to join the Publications Team as a volunteer may register using this form.
For more enquiries, please contact Kirk Nicholls.
Governance
The SABSA Institute has recently updated several governance artefacts:
- TSI – External Data Processing – Privacy Policy
- TSI – Website Terms of Use and Membership Terms
We welcome all members and users of the sites to familiarise themselves with the updated policies and terms.
Digital Badges
TSI Digital Credentials Program
The SABSA Institute will be launching our Digital Credentials Program in 2025.
What are the benefits of a Digital Badge?
Credly Digital Badges empower you with the ability to:
- Celebrate your SABSA Certification and achievement with a secure digital version of your credential
- Demonstrate your certification as a Chartered Architect at Foundation, Practitioner or Master Level by sharing your credentials online
- Align your skills and jobs with industry roles and market values on the Credly platform
- Set and achieve new goals as you progress through the SABSA Certification roadmap
- Automatically allow for employer and human resource real-time credential verification for publicly shared badges
What happens next? If you are a Chartered Architect:
- You’ll receive an email from Credly inviting you to accept your badge.
- Click the button in the email.
- Create and confirm your Credly account.
- Accept your badge and start sharing!
Follow us on LinkedIn for more information.
COSAC APAC 2025
The COSAC APAC 2025 Information Security Conference will take place in Melbourne from 25th to 27th February. The agenda includes a full SABSA Stream across three days. Event registration is now open.
For anyone looking to apply for sponsorship, The SABSA Founders Bursary aims to award at least one fully funded place at COSAC APAC in Melbourne annually. For more information on the bursary, please refer here.
Individuals and industry organisations who are interested in donating to the SABSA Founders Bursary may also do so here.
As we conclude 2024 and look back on our achievements and progress of the past year, let us not forget to be grateful for the moments we’ve been given, and remember to cherish the experiences.
Wishing everyone a joyous holiday season and a Happy New Year.
See you in 2025.
The SABSA Institute