Your cart is empty.
Keep shopping
Teach on Udemy
Turn what you know into an opportunity and reach millions around the world.
Learn MoreModeling SABSA Security Architecture in ArchiMate with Archi
Rating: 4.9 out of 54.9(8 ratings)
341 students
Modeling SABSA Security Architecture in ArchiMate with Archi
Using Archi / Protege / PlantUML / JSON Tools to Model SABSA® Security Architecture in ArchiMate® Specification
Created byXiaoqi Zhao
Last updated 4/2026
English
English [Auto],
What you'll learn
- The ArchiMate language specification and TOGAF methodology/framework
- The SABSA methodology and matrix from different layers
- Alignment between SABSA and ArchiMate from the joint modeling approach
- Hands-on practice through Archi, Protege and other tools to modeling the Security Overlay
Explore related topics
Course content
11 sections • 113 lectures • 28h 57m total length
- Opening and Introduction24:33
Open with an introduction to modeling SABSA security architecture in ArchiMate using Archi, detailing the Open Group subset guide, learning tools, and a hands-on GitHub-backed modeling approach.
- Preface and Background22:48
Introduces SABSA security architecture modeling in Archimate, outlining the security overlay, boundaryless information flow, and integration with TOGAF and Archimate layers for business-driven, modular security design.
- ArchiMate Specification Intro and A Simple ArchiMate Diagram41:11
- Benifits of Modeling14:06
Discover how aligning Archimate with Archi streamlines modeling, abstracts complexity into reusable components, and yields seven benefits—better documentation, efficiency, stakeholder buy-in, standardization, and centralized repositories.
- ArchiMate Security Perspective; Benefit of Modeling to SABSA and Practitioner5:45
Explore Archimate security perspective and SABSA benefits for practitioners through vendor-neutral modeling and the Archimate security overlay within TOGAF guidance.
- 3.1 Core Elements10:37
Explore Archimate core elements and core relationships in the SABSA–Archimate context, across the three-layer metamodel of business, application, and technology, including active, passive, and behavior roles.
- 3.2 Core Relationships13:46
Discover Archimate 3.2 core relationships—structural, dependency, dynamic, specialization, and association—guided by the relationship table that defines valid connections and directionality.
- 3.3 Extension Layers and Elements18:03
Explore Archimate extension layers and elements, including the strategy layer, motivation aspects, and implementation and migration layer, plus composition elements like grouping and location for modeling capabilities and AI.
- 3.4 ArchiMate Language Customization39:01
Master ArchiMate language customization for SABSA security architecture in Archi, using user defined attributes, stereotypes, and overload relations to model threat agents and staff roles.
- 3.5 ArchiMate Full Framework (and also TOGAF ADM)15:07
Explore the Archimate full framework, including code and extended layers, plus motivation, strategy, and migration. Compare Archimate with TOGAF ADM and Sabsa mappings and review learning resources and case studies.
- 4.1 Introduction to the Security Overlay11:23
- 4.2 An Overview of the Task12:30
Explore how sabsa aligns with archimate and archi to map five horizontal layers—from contextual to physical—across a security service management architecture, with togaf and itil mappings guiding the approach.
- 4.3 Risk & Security Modeling in ArchiMate - Figure 06: Risk-Modeling Example36:29
Learn to model risk and security in Archimate 3.2, mapping risk events, threat events, and loss events to drivers, motivations, and control objectives through a practical risk modeling example.
- 4.3 Risk & Security Modeling in ArchiMate - Figure 07: Risk-Modeling Relations20:43
Explore security modeling in ArchiMate with Archi, focusing on figure 07 risk-modeling relations within SABSA context, linking goals, requirements, assessments, threats, and controls across business, application, and technology layers.
- 4.3 Risk & Security Modeling in ArchiMate - Figure 08: Mapping of Risk/Security17:39
- 4.3 Risk & Security Modeling in ArchiMate - Figure 09: Motivation Metamodel14:07
Explore how the motivation metamodel in Archimate maps meaning, value, stakeholder relationships, and the realization chain to model goals, outcomes, principles, and requirements.
- 4.4 The Basic Elements and Relationships4:59
this lecture recaps the basic elements and relationships for aligning sabsa with archimate, covering identifier, abstract flag, stereotype, and cardinality, including url and uri concepts.
- 5.0 Figure 10: Security Enhanced Motivation Metamodel20:29
Explore modeling security enhanced motivation with ArchiMate by mapping figure ten's motivation metamodel to ArchiMate notation, detailing value, loss, value chain, risk, assessment, goals, objectives, and principles.
- 5.1 Value & Loss - Figure 11: Modeling Assets using Value24:29
For PlantUML tool usage, check my Udemy course "Learning and Practicing PlantUML (UML Modeling Language) with Live Demo" for detail
- 5.1 Value & Loss - Table 10: Proposed Value Property Overlay12:53
- 5.2 Value Chain - Figure 12: Composition of Value Chain22:10
Learn to model the composition of the value chain in ArchiMate, connecting strategy layer value streams and business capabilities to processes and functions through hands-on diagramming.
- 5.2 Value Chain - Table 11: Value Chain Properties11:58
Learn to model value chain properties in ArchiMate, including cost elements and final value, and document them in JSON while noting composition and aggregation.
- 5.3 SABSA Business Attrubute - Figure 13: Represented in ArchiMate Language16:21
Learn to model SABSA business attributes in ArchiMate, using figure 13 with eight pillars, a pillar-attribute and metrics structure, namespaces, stereotypes, and a matrix approach to build the specialized view.
- 5.3 SABSA Business Attribute - Table 12: SABSA Attribute Properties7:36
- 5.3 SABSA Business Attribute - 5.3.1 Structural Placement - Figure 1617:14
Figure 16: Principles in the ArchiMate Motivation Hierarchy
- 5.3 SABSA Business Attribute - 5.3.1 Structural Placement - Figure 1722:35
Highlighting the Control Hierarchy Mismatch (i)
- 5.3 SABSA Business Attribute - 5.3.1 Structural Placement - Figure 1812:02
Highlighting the Control Hierarchy Mismatch (ii)
- 5.3 SABSA Business Attribute - 5.3.1 Structural Placement - Figure 199:48
Figure 19: Achieving the Desired Hierarchy
- 5.3 SABSA Business Attribute - 5.3.2 Traceability of Business Attributes28:30
Trace SABSA business attributes across ArchiMate layers—business, application, and technology—using cross-layer diagrams to map attributes to capabilities, business processes, and information.
- 5.4 Meaning - Figure21: Applying Attribute Metrics to Multiple Controls9:39
Apply the business attribute matrix to meaning within Archimate’s motivation layer, mapping subset attributes to goals across controls, then externalize the context sensitive matrix.
- 5.4 Meaning - Figure22: Use Meaning to Externalize Context-Sensitive Metrics10:08
Explore how to use meaning to externalize context-sensitive metrics in ArchiMate, linking attributes to meanings for confidentiality and access control, with examples like tokenized fields, TLS, and certificate-based authentication.
- 5.5 Impact, Threat, Vulnerability, and Risk - Table 13: Schema Build Up14:46
Model impact, threat, vulnerability, and risk as stereotyped assessment elements in ArchiMate, using table 13 schema and JSON templates to document and reuse across figures and views.
- 5.6 Controls - Figure 23: Expressing Composite Requirements11:59
Explore SABSA security architecture concepts in Archi by expressing composite requirements in figure 23, using stereotypes, control objectives, and data in transit protection to illustrate control patterns.
- 5.6 Controls - Figure 24: Example of a Control Pattern10:58
Explore a figure 24 example of a control pattern in SABSA ArchiMate, modeling annual recertification through a stereotype-driven control realized by business events, processes, and access rights.
- 5.7 Multi-Tiered Security - Table 14: Control Element Properties13:36
explore multi-tier security in sabsa archimate by detailing table 14 control element properties and a json schema for end-to-end defense across identify, protect, detect, respond, and recovery.
- 5.7 Multi-Tiered Security - Figure 25: Example of Multi-Tiered Security20:15
Explore building figure 25 for a sabsa security model in archimate with archi, mapping goals to requirements and constraints across layers using control objectives and protections.
- 5.8 Regulations and Standards - Figure 27: The Structure Modeling20:03
Learn to model regulations and standards in Archimate, using ISO 27001 and SP 853 as examples, with hierarchical document structure, groupings, and stereotypes to represent compliance requirements.
- 5.8 Regulations and Standards - Table 15: Properties Schema8:05
Explore how to model standard and regulation properties in a SABSA security architecture using a properties schema, with attributes like id, namespace, publisher, version, publish date, effective and expiry dates.
- 5.9 Articles, Mandates, and Compliance Objectives - Figure 27: GDPR Article 712:59
Model GDPR article 7 consent in ArchiMate with Archi, using prepared elements to illustrate how legal paragraphs map to compliance objectives and requirements.
- 5.9 Articles, Mandates, and Compliance Objectives - Table 16: Schema in JSON8:44
- 5.10 Control Mechanisms - Figure 28: Use Cases and Iconography for Control16:07
- 5.10 Control Mechanisms - Table 17: Control Properties4:01
Explain control mechanisms in ArchiMate through table 17: control properties, using the control stereotype to model standalone or component elements addressing specific requirements, with simple JSON schemas.
- 5.11 Trust - Table 18: Trust Profile (JSON Schema)4:53
- 6.0 Overview - Table 19: SABSA Contextual Architecture (ontology update)15:13
- 6.0 Overview - Figure 29: Develop and Maintain Contextual Security Architecture24:36
Model figure 29 in Archimate to develop and maintain a contextual security architecture, detailing artifacts, activities, and deliverables.
- 6.0 Overview - Table 20: Contextual Elements in native ArchiMate11:31
Explore table 20 contextual elements in native ArchiMate for SABSA security architecture, organizing assets, motivation, and business elements (resources, products, processes, actors, locations) into structured groupings.
- 6.1 Business Assets - 6.1.1 Figure 30: Value Stream Modeling15:51
- 6.1 Business Assets - 6.1.2 Table 22: Business Object Security Properties6:07
- 6.1 Business Assets - 6.1.2 Figure31: Element Properties and SABSA Attributes14:19
Model sabsa attributes as a catalog of element properties and sub-attributes, linking confidentiality and pii classifications to business objects, with view-specific label expressions.
- 6.1 Business Assets - 6.1.3 Table23: Business Service(SLA)/Interface Properties14:14
Learn to model business assets by linking the business service to service level agreements and the business interface in archimate. Explore sla metrics like availability, recovery time, and rpo.
- 6.2 Buiness Risk & 6.3 Business Process/Function/Interaction - Table 24 Schema10:25
- 6.4 Business Roles and Actors - Table 25: Properties Schema13:21
Model business roles and actors in SABSA security architecture using ArchiMate, detailing actor and role properties in table 25, plus JSON schema documents and assignment relationships.
- 6.4 Business Roles and Actors - 6.4.1 Governance - Figure 32 RACI Relationships10:46
Explore governance of business roles and actors using ArchiMate in Archi, modeling RACI relationships with figure 32 patterns and directed associations between data subjects and custodians.
- 6.4 Business Roles and Actors - 6.4.1 Governance - Figure 3311:33
Figure33: Avoid RACI Entanglement
a) A Pattern Repeated in Multiple Views
b) ... Caused Entanglement in the Underlying Model
- 6.4 Business Roles and Actors - 6.4.1 Governance - Figure 3411:12
Figure 34: Recommended RACI Patterns
a) Solved by a Tertiary Relationship
b) Solved by Specialization of an Abstract Base Role
- 6.4 Business Roles and Actors - 6.4.1 Governance - Table 26: RACI Properties4:06
Document governance in archimate by modeling a receipt property schema for raci roles within a directed association, naming the schema receipt and enumerating the roles: responsible, accountable, consulted, informed.
- 6.4 Business Roles and Actors - 6.4.2 Threat Actors - Figure 3515:37
Figure 35: Possibilities for Modeling Threat Actors
a) Something you are? (a throughly bad person)
b) Opportunist Exploit? (a trusted employee falls to temptation)
c) Something you do? (a wrong action)
- 6.4 Business Roles and Actors - 6.4.2 Threat Actors - Figure 3610:13
Figure 36: Sensitivity in the Representation of Threats
a) Avoid unnecessary offence
b) Acknowledge the risk without personalizing it
c) Avoid assigning motive
- 6.4 Business Roles and Actors - 6.4.2 Threat Actors - Table 273:32
Explore modeling threat actors as threat agents, stereotypes of business actors (table 27), with properties like id, type (technical), name, and population details, using ArchiMate for SABSA security architecture.
- 6.5 Business Geography & 6.6 Business Time Dependencies & Section Recap7:23
Learn to model business geography and time dependencies in contextual security architecture with Archimate, including location elements, security domains, delivery schedules, goals, and security events.
- 7.0 Conceptual Security Architecture Overview - Table 2817:43
Table 28: SABSA Contceptual Architecture, documented in Protege Ontology editing tool
- 7.0 Conceptual Security Architecture Overview - Figure 3730:27
Figure 37: Developing the SABSA Conceptual Security Architecture
- 7.1 Attribute Profiling - Figure 38: Attribute Profiling (i)12:55
Model attribute profiling in ArchiMate with Archi by applying GDPR article five to define personal data principles, data attributes, and realizations, and organize them with groupings for privacy compliance.
- 7.1 Attribute Profiling - Figure 39: Attribute Profiling (ii)10:22
- 7.1 Attribute Profiling - Figure 40: Attribute Profiling (iii)7:28
Explore attribute profiling in SABSA security architecture in ArchiMate with Archi, identifying data minimization, accuracy, and up-to-date maintenance in figure 40.
- 7.1 Attribute Profiling - Figure 41: Completed Attribute Profile13:11
Complete the 7.1 attribute profiling for GDPR article five in ArchiMate, detailing data subject identification and the purposes for which data are processed, with confidentiality, integrity, availability, and accountable controls.
- 7.2 Risk Management & Strategy - 7.2.1 Risk Management - Figure 4218:50
Figure 42; Business Risk Analysis Process
- 7.2 Risk Management & Strategy - 7.2.2 Policy Architecture - Figure 4315:48
Figure 43: Compliance Metamodel, built in Archi's sketch view
- 7.2 Risk Management & Strategy - 7.2.2 Policy Architecture - Figure 4420:01
Figure 44: An Example Compliance Model
- 7.2 Risk Management & Strategy - 7.2.3 Multi-Regulatory Compliance - Figure 4511:14
Figure 45: Control Consolidation
- 7.2 Risk Management & Strategy - 7.2.3 Multi-Regulatory Compliance - Figure 4610:41
Figure 46: Possible Duplicate Objectives, Coupled Through Attribute Profile
- 7.3 Conceptual Security Services - Figure 47: Security Services in Conceptual18:00
Learn how to model conceptual security services in ArchiMate, comparing inline mediation, service inversion, and service isolation link, with authentication and access control across layers.
- 7.4 Identity and Trust - 7.4.1 Identity and Access Right - Figure 4815:16
Figure 48: What the Security Overlay Would Like to Express
- 7.4 Identity and Trust - 7.4.1 Identity and Access Right - Figure 496:17
Figure 49: What the ArchiMate Specification Supports
- 7.4 Identity and Trust - 7.4.1 Identity and Access Rigth - Table 296:43
Table 29: Elements used in Logical Access Management
- 7.4 Identity and Trust - 7.4.2 Roles and Responsibilities - Figure 5020:01
Figure 50: Modeling Identity and Role Concepts
- 7.4 Identity and Trust - 7.4.3 Trust - Figure 5113:31
Figure 51: Common Examples of Signals Crossing Domain Boundaries
- 7.4 Identity and Trust - 7.4.3 Trust - Figure 5215:14
Figure 52: Simply Trust Relationships using Flow
- 7.4 Identity and Trust - 7.4.3 Trust - Figure 535:12
Figure 53: Trust Attributes Associated with Inter-Domain Signals
- 7.4 Identity and Trust - 7.4.3 Trust - Table 306:38
Table 30: Elements and Relationships used in Trust Modeling
- 7.5 Domain Framework Model - Table 31: Security Domain Mapping6:05
Document the domain framework model for Sabsa in Archimate by mapping security domains with location and grouping, using a security domain overlay to support trust modeling in table 31.
- 7.6 Security Events - Table 32: Security Events Schema3:43
Model SABSA security events in ArchiMate by enabling the security flag on events, then compare any event to the security events schema in table 32.
- 8.0 Logical Overview - Table 33: SABSA Logical Architecture (ontology)21:18
- 8.0 Logical Overview - Figure 54: Developing SABSA Logical Security Architecture26:53
Develop the SABSA logical security architecture in ArchiMate by building a structured, multi-layer model from business process to security representations, work packages, and deliverables.
- 8.1 Information Assets - 8.1.1 Application Components - Figure 5514:19
Figure 55: A better solution using Architectural Models to identify Critical Applications
- 8.1 Information Assets - 8.1.1 Application Components - Table 345:41
Table 34: Application Component Properties
- 8.1 Information Assets - 8.1.1 Application Components - Table 3511:35
Table 35: Data Object Properties Schema, including «Defect», «Security Configuration», «Malware», and Data Object
- 8.2 Risk Modeling - Figure 56: Open FAIR™ Example Scenario18:30
Learn 8.2 risk modeling using an Open FAIR example scenario in ArchiMate, detailing a HR executive credential risk with two diagrams and mapping access, assets, and risk management strategies.
- 8.2 Risk Modeling - Figure 57: The Open FAIR™ Risk Taxonomy (PlantUML)14:12
Develop the Open FAIR risk taxonomy in PlantUML with UML diagrams, applying mind map and WBS layouts to map loss event frequency and loss magnitude.
- 8.2 Risk Modeling - Figure 58: The Open FAIR™ Risk Taxonomy Modeled in ArchiMate19:41
Translate the Open FAIR risk taxonomy into ArchiMate, employing aggregation and motivation elements to model loss event frequency, risk factors, and their influence on controls.
- 8.2 Risk Modeling - Figure 59: The Open FAIR Risk Taxonomy Modeled (Qualitative)14:04
- 8.2 Risk Modeling - Figure 60: The Open FAIR Risk Taxonomy Modeled(Quantitative)7:57
Model the Open FAIR risk taxonomy quantitatively for a credential issue scenario using Archi and extensions. Show how loss frequency and risk estimates translate into primary productivity losses and fines.
- 8.3 Application Functionality and Services - Figure 61: Application Services18:09
Explore application service modeling in ArchiMate within the SABSA security framework, detailing business processes, services, internal and external actors, data values, and SLA/RTO/RPO properties.
- 8.3 Application Functionality and Services - Table 36: schema modeling9:00
Table 36: Application Behavior Availability Properties
- 8.4 Logical Access Management (LAM) - Figure 6216:57
Figure 62: Modeling Authentication in the Primary Architecture
- 8.4 Logical Access Management (LAM) - Figure 6322:22
Figure 63: Example of Registration and Provisioning in Secondary Architecture
- 8.4 Logical Access Management (LAM) - Table 3716:04
Table 37: Security Properties of Elements used in the Logical Layer
- 8.5 Logical Domains & 8.6 Timing and Events & Section Recap5:42
Explore modeling logical security architecture, focusing on 8.5 logical domains and 8.6 timing and events, and recap SABSA concepts, domain frameworks, and security event schemas in ArchiMate.
- 9.0 Physical Overview - Figure 38: SABSA Physical Architecture (Protege)13:31
- 9.0 Physical Overview - Figure 3: SABSA Component Architecture (Protege)18:19
Model SABSA component architecture within Archi, focusing on the physical security architecture layer, artifacts, and activities using Protégé ontology in a graph.
- 9.0 Physical Overview - Figure 64: Developing SABSA Physical Sec. Architecture21:19
Develop SABSA physical security architecture in ArchiMate by building figure 64 diagrams, organizing work packages, and defining security mechanisms, processes, and interfaces with careful numbering.
- 9.1 Data and Technology Assets - 9.1.1 Artifacts (Stereotypes)8:42
Figure 65: Stereotype of Artifact
- 9.1 Deat and Technology Assets - 9.1.1 Artefact - Figure 6612:37
Figure 66: Configuration Files
- 9.1 Data and Technology Assets - 9.1.2 Device & Node - Figure 6710:30
Explore Archimate 9.1 data and technology access modeling, focusing on node and device notations and security stereotypes such as HSM and VPN gateway, with practical property details.
- 9.2 Risk Management Practices - 9.2.1 Defect - Figure 6839:21
- 9.3 Process Mechanisms - Figure 69: Realization of Security Services23:59
Examine how 9.3 realizes security services in ArchiMate by mapping conceptual security services to two technology services, detailing business processes, interfaces, and authentication in a multi-layer model.
- 9.3 Process Mechanims & 9.4 Human-Machine Interfaces - Table 40 Schema (1)15:42
Schema documented via JSON on:
Technology Service
Technology Process / Technology Function
System Software
Technology Interface
- 9.5 Physical Env. & 9.6 Timing and Interrupts - Table 40 Schema (2)12:57
Schema documented via JSON on:
«Executable»
«Data»
«Defect»
- Conclusion, Recap, Summary and Resource Introduction16:51
Master sabsa security architecture in archimate with archi through recap, highlighting resources, mind maps, and four-layer contextual conceptual logical physical ontologies, plus access to the repository and udemy course.
Requirements
- Certain knowledge on SABSA and Open Group's ArchiMate would be beneficial
Description
SABSA® (Sherwood Applied Business Security Architecture) is a methodology for developing risk-driven enterprise information security and information assurance architectures and for delivering security infrastructure solutions that support critical business initiatives. It is an open standard, comprising a number of frameworks, models, methods and processes, free for use by all, with no licensing required for end-user organizations who make use of the standard in developing and implementing architectures and solutions. (Source: W100 - SABSA® White Paper)
Are you a security architect looking to make the SABSA framework more tangible? Or an enterprise architect needing to integrate a robust security overlay into your ArchiMate models? This course transforms the theoretical "Sherwood Applied Business Security Architecture" (SABSA) into a visual, actionable practice using the industry-standard ArchiMate language and the open-source Archi tool.
Why this course? SABSA is renowned for its business-driven logic, but creating its numerous artifacts at scale can be challenging. By leveraging ArchiMate’s extensibility, you will learn to build a "Security Overlay" that ensures traceability from business goals down to physical controls.
What You Will Learn:
The Rationale for Alignment: Why combining SABSA and ArchiMate is the "gold standard" for modern secure EA.
The Motivation Aspect: Modeling business drivers and security attributes using ArchiMate’s Motivation extension.
Layer-by-Layer Modeling: A step-by-step journey through Contextual, Conceptual, Logical, and Physical security architectures.
Tooling Excellence: How to use Archi (and advanced tools like jArchi scripts, PlantUML, and JSON) to automate and validate your models.
Practical Case Studies: Hands-on practice following patterns from the official "Guide to Modeling SABSA with the ArchiMate Specification."
Who is this for?
Security Architects wanting to move beyond spreadsheets and into model-based engineering.
Enterprise Architects (TOGAF/ArchiMate certified) looking to specialize in security.
Consultants who need to demonstrate compliance and risk management visually to stakeholders.
Through learning the Security Overlay modeling, you'll get chance to practice Archi, JSON, Protege, as well as FreePlane, enjoy!
Who this course is for:
- Enterprise Architect or Security Architect who want to find the hands-on method of modeling Security Overlay
- Any architects who want to enrich security modeling skills base on ArchiMate language specification