<map version="freeplane 1.12.1">
<!--To view this file, download free mind mapping software Freeplane from https://www.freeplane.org -->
<node TEXT="Modeling SABSA®&#xa;in ArchiMate®" LOCALIZED_STYLE_REF="AutomaticLayout.level.root" FOLDED="false" ID="ID_1090958577" CREATED="1409300609620" MODIFIED="1747668057865">
<hook NAME="accessories/plugins/AutomaticLayout.properties" VALUE="ALL"/>
<font BOLD="true"/>
<hook NAME="MapStyle" background="#eeeeeeff" zoom="0.6830134">
    <properties show_icon_for_attributes="true" edgeColorConfiguration="#808080ff,#ff0000ff,#0000ffff,#00ff00ff,#ff00ffff,#00ffffff,#7c0000ff,#00007cff,#007c00ff,#7c007cff,#007c7cff,#7c7c00ff" show_tags="UNDER_NODES" show_note_icons="true" associatedTemplateLocation="template:/light_grey_straight_template.mm" fit_to_viewport="false" show_icons="BESIDE_NODES"/>
    <tags category_separator="::"/>

<map_styles>
<stylenode LOCALIZED_TEXT="styles.root_node" STYLE="oval" UNIFORM_SHAPE="true" VGAP_QUANTITY="24 pt">
<font SIZE="24"/>
<stylenode LOCALIZED_TEXT="styles.predefined" POSITION="bottom_or_right" STYLE="bubble">
<stylenode LOCALIZED_TEXT="default" ID="ID_1082331723" ICON_SIZE="12 pt" FORMAT_AS_HYPERLINK="false" COLOR="#222222" BACKGROUND_COLOR="#eeeeee" STYLE="rectangle" SHAPE_HORIZONTAL_MARGIN="8 pt" SHAPE_VERTICAL_MARGIN="5 pt" BORDER_WIDTH_LIKE_EDGE="false" BORDER_WIDTH="1.9 px" BORDER_COLOR_LIKE_EDGE="true" BORDER_COLOR="#f0f0f0" BORDER_DASH_LIKE_EDGE="true" BORDER_DASH="SOLID" VGAP_QUANTITY="3 pt">
<arrowlink SHAPE="CUBIC_CURVE" COLOR="#000000" WIDTH="2" TRANSPARENCY="200" DASH="" FONT_SIZE="9" FONT_FAMILY="SansSerif" DESTINATION="ID_1082331723" STARTARROW="NONE" ENDARROW="DEFAULT"/>
<font SIZE="11" BOLD="false" STRIKETHROUGH="false" ITALIC="false"/>
<edge STYLE="horizontal" COLOR="#444444" WIDTH="3" DASH="SOLID"/>
<richcontent TYPE="DETAILS" CONTENT-TYPE="plain/auto"/>
<richcontent TYPE="NOTE" CONTENT-TYPE="plain/auto"/>
</stylenode>
<stylenode LOCALIZED_TEXT="defaultstyle.details"/>
<stylenode LOCALIZED_TEXT="defaultstyle.tags">
<font SIZE="10"/>
</stylenode>
<stylenode LOCALIZED_TEXT="defaultstyle.attributes">
<font SIZE="9"/>
</stylenode>
<stylenode LOCALIZED_TEXT="defaultstyle.note" COLOR="#000000" BACKGROUND_COLOR="#f6f9a1" TEXT_ALIGN="LEFT"/>
<stylenode LOCALIZED_TEXT="defaultstyle.floating">
<edge STYLE="hide_edge"/>
<cloud COLOR="#f0f0f0" SHAPE="ROUND_RECT"/>
</stylenode>
<stylenode LOCALIZED_TEXT="defaultstyle.selection" COLOR="#ffffff" BACKGROUND_COLOR="#3333ff" BORDER_COLOR_LIKE_EDGE="false" BORDER_COLOR="#3333ff"/>
</stylenode>
<stylenode LOCALIZED_TEXT="styles.user-defined" POSITION="bottom_or_right" STYLE="bubble">
<stylenode LOCALIZED_TEXT="styles.important" ID="ID_334768726" COLOR="#443333" BACKGROUND_COLOR="#dddddd" BORDER_WIDTH="3 px" BORDER_COLOR_LIKE_EDGE="false" BORDER_COLOR="#cc0033">
<icon BUILTIN="yes"/>
<arrowlink COLOR="#cc0033" TRANSPARENCY="255" DESTINATION="ID_334768726"/>
<font SIZE="12" BOLD="true"/>
</stylenode>
<stylenode LOCALIZED_TEXT="styles.flower" COLOR="#ffffff" BACKGROUND_COLOR="#255aba" STYLE="oval" TEXT_ALIGN="CENTER" BORDER_WIDTH_LIKE_EDGE="false" BORDER_WIDTH="22 pt" BORDER_COLOR_LIKE_EDGE="false" BORDER_COLOR="#f9d71c" BORDER_DASH_LIKE_EDGE="false" BORDER_DASH="CLOSE_DOTS" MAX_WIDTH="6 cm" MIN_WIDTH="3 cm"/>
</stylenode>
<stylenode LOCALIZED_TEXT="styles.AutomaticLayout" POSITION="bottom_or_right" STYLE="bubble">
<stylenode LOCALIZED_TEXT="AutomaticLayout.level.root" COLOR="#ffffff" BACKGROUND_COLOR="#000000" BORDER_COLOR_LIKE_EDGE="false" BORDER_COLOR="#2c2b29" BORDER_DASH_LIKE_EDGE="true">
<font SIZE="18"/>
</stylenode>
<stylenode LOCALIZED_TEXT="AutomaticLayout.level,1" COLOR="#ffffff" BACKGROUND_COLOR="#222222" BORDER_COLOR="#2c2b29">
<font SIZE="16"/>
</stylenode>
<stylenode LOCALIZED_TEXT="AutomaticLayout.level,2" COLOR="#ffffff" BACKGROUND_COLOR="#444444" BORDER_COLOR_LIKE_EDGE="true" BORDER_COLOR="#f0f0f0">
<font SIZE="14"/>
</stylenode>
<stylenode LOCALIZED_TEXT="AutomaticLayout.level,3" COLOR="#ffffff" BACKGROUND_COLOR="#676767" BORDER_COLOR_LIKE_EDGE="true" BORDER_COLOR="#f0f0f0">
<font SIZE="12"/>
</stylenode>
<stylenode LOCALIZED_TEXT="AutomaticLayout.level,4" COLOR="#ffffff" BACKGROUND_COLOR="#888888" BORDER_COLOR_LIKE_EDGE="true" BORDER_COLOR="#f0f0f0">
<font SIZE="11"/>
</stylenode>
<stylenode LOCALIZED_TEXT="AutomaticLayout.level,5" COLOR="#222222" BACKGROUND_COLOR="#aaaaaa" BORDER_COLOR_LIKE_EDGE="true" BORDER_COLOR="#f0f0f0">
<font SIZE="11"/>
</stylenode>
<stylenode LOCALIZED_TEXT="AutomaticLayout.level,6" COLOR="#222222" BACKGROUND_COLOR="#bbbbbb" BORDER_COLOR_LIKE_EDGE="true" BORDER_COLOR="#f0f0f0">
<font SIZE="10"/>
</stylenode>
<stylenode LOCALIZED_TEXT="AutomaticLayout.level,7" COLOR="#222222" BACKGROUND_COLOR="#cccccc" BORDER_COLOR="#f0f0f0">
<font SIZE="10"/>
</stylenode>
<stylenode LOCALIZED_TEXT="AutomaticLayout.level,8" COLOR="#222222" BACKGROUND_COLOR="#dddddd" BORDER_COLOR="#f0f0f0">
<font SIZE="10"/>
</stylenode>
<stylenode LOCALIZED_TEXT="AutomaticLayout.level,9" COLOR="#222222" BACKGROUND_COLOR="#eeeeee" BORDER_COLOR="#f0f0f0">
<font SIZE="10"/>
</stylenode>
<stylenode LOCALIZED_TEXT="AutomaticLayout.level,10" COLOR="#2c2b29" BACKGROUND_COLOR="#ffffff" BORDER_COLOR="#f0f0f0">
<font SIZE="9"/>
</stylenode>
</stylenode>
</stylenode>
</map_styles>
</hook>
<node TEXT="05. The Motivation Aspect" POSITION="bottom_or_right" ID="ID_1121778975" CREATED="1747668134684" MODIFIED="1748271358209" VGAP_QUANTITY="3 pt">
<node TEXT="Figure 10: Security Enhanced Motivation Metamodel" POSITION="bottom_or_right" ID="ID_321030896" CREATED="1748180460960" MODIFIED="1748180473333"/>
<node TEXT="05.1 Value &amp; Loss" FOLDED="true" POSITION="bottom_or_right" ID="ID_906105716" CREATED="1748180505615" MODIFIED="1748180513492">
<node TEXT="Figure 11: Modeling Assets using Value" ID="ID_91858292" CREATED="1748180518192" MODIFIED="1748180526787"/>
<node TEXT="Table 10: Proposed Value Property Overlay" ID="ID_1159239546" CREATED="1748851852558" MODIFIED="1748851864534"/>
</node>
<node TEXT="05.2 Value Chain" FOLDED="true" POSITION="bottom_or_right" ID="ID_1983013192" CREATED="1748180747253" MODIFIED="1748180752262">
<node TEXT="Figure 12: Composition of Value Chains" ID="ID_247946098" CREATED="1748180752267" MODIFIED="1748180763089"/>
<node TEXT="Table 11: Value Chain Properties" ID="ID_603329795" CREATED="1748852049250" MODIFIED="1748852059761"/>
</node>
<node TEXT="05.3 SABSA Business Attributes" FOLDED="true" POSITION="bottom_or_right" ID="ID_1183827331" CREATED="1748180790318" MODIFIED="1748180799444">
<node TEXT="Figure 13: SABSA Business Attributes Represented in the ArchiMate Language" ID="ID_1817507809" CREATED="1748180803069" MODIFIED="1748180821506"/>
<node TEXT="Table 12: SABSA Attribute Properties" ID="ID_467781429" CREATED="1748865985044" MODIFIED="1748865995560"/>
<node TEXT="5.3.1 Structural Placement of Business Attributes" FOLDED="true" ID="ID_1841880917" CREATED="1748229017663" MODIFIED="1748229032044">
<node TEXT="Figure 16: Principle in the ArchiMate Motivation Hierarchy" ID="ID_1658090413" CREATED="1748229053502" MODIFIED="1748229066770"/>
<node TEXT="Figure 17: Highlighting the Control Hierarchy Mismatch (i)" ID="ID_1563001622" CREATED="1748229072606" MODIFIED="1748229087011"/>
<node TEXT="Figure 18: Highlighting the Control Hierarchy Mismatch (ii)" ID="ID_1260826359" CREATED="1748229072606" MODIFIED="1748265218469"/>
<node TEXT="Figure 19: Achieving the Desired Hierarchy" ID="ID_1325434171" CREATED="1748265195710" MODIFIED="1748265230714"/>
</node>
<node TEXT="5.3.2 Traceability of Business Attributes" ID="ID_955512661" CREATED="1748265231396" MODIFIED="1748265241458">
<node TEXT="Figure 20: Attribute Traceability Across Layers" ID="ID_1219676788" CREATED="1748265289228" MODIFIED="1748265302479"/>
</node>
</node>
<node TEXT="05.4 Meaning" FOLDED="true" POSITION="bottom_or_right" ID="ID_1741951927" CREATED="1748265307260" MODIFIED="1748271358208">
<node TEXT="Figure 21: Applying Attribute Metrics to Multiple controls" ID="ID_399408634" CREATED="1748265312427" MODIFIED="1748265327482"/>
<node TEXT="Figure 22: Use of Meaning to Externalize Context-Sensitive Metrics" ID="ID_836465482" CREATED="1748265330414" MODIFIED="1748265344200"/>
</node>
<node TEXT="05.5 Impact, Threat, Vulnerability, and Risk" FOLDED="true" POSITION="bottom_or_right" ID="ID_1182153628" CREATED="1748265351764" MODIFIED="1748265363037">
<node TEXT="Table 13: Risk Element Properties" ID="ID_863664839" CREATED="1749093990114" MODIFIED="1749094003352"/>
</node>
<node TEXT="05.6 Controls: Objectives, Requirements, and Measures" FOLDED="true" POSITION="bottom_or_right" ID="ID_1603541117" CREATED="1748265363042" MODIFIED="1748266014256">
<node TEXT="Figure 23: Expressing Composite Requirements" ID="ID_314020606" CREATED="1748266025501" MODIFIED="1748266035743"/>
<node TEXT="Figure 24: Example of a Control Pattern" ID="ID_688179235" CREATED="1748266035972" MODIFIED="1748266043616"/>
</node>
<node TEXT="05.7 Multi-Tiered Security" FOLDED="true" POSITION="bottom_or_right" ID="ID_647472870" CREATED="1748266047588" MODIFIED="1748266153182">
<node TEXT="Table 14: Control Element Properties" ID="ID_1872466531" CREATED="1749097112293" MODIFIED="1749097128663"/>
<node TEXT="Figure 25: Example of Multi-Tiered Security" ID="ID_1763341137" CREATED="1748266153187" MODIFIED="1748266171440"/>
</node>
<node TEXT="05.8 Regulations and Standards" FOLDED="true" POSITION="bottom_or_right" ID="ID_748157745" CREATED="1748266185709" MODIFIED="1748266198972">
<node TEXT="Figure 26: The Structure of Standards and Regulations" ID="ID_1954645238" CREATED="1748266198977" MODIFIED="1748266210553"/>
<node TEXT="Table 15: Standard and Regulation Properties" ID="ID_1075351765" CREATED="1749097332548" MODIFIED="1749097341177"/>
</node>
<node TEXT="05.9 Articles, Mandates, and Compliance Objectives" FOLDED="true" POSITION="bottom_or_right" ID="ID_1145480025" CREATED="1748266235171" MODIFIED="1748266247068">
<node TEXT="Figure 27: Articles and Compliance Objectives" ID="ID_217883454" CREATED="1748266247074" MODIFIED="1748266259479"/>
<node TEXT="Table 16: Compliance Conceptual Element Properties" ID="ID_1709955040" CREATED="1749097488637" MODIFIED="1749097500319"/>
</node>
<node TEXT="05.10 Control Mechanisms" FOLDED="true" POSITION="bottom_or_right" ID="ID_1707637259" CREATED="1748266435061" MODIFIED="1748266443047">
<node TEXT="Figure 28: Use Cases and Iconography for Control" ID="ID_560327897" CREATED="1748266443053" MODIFIED="1748266454313"/>
<node TEXT="Table 17: Control Properties" ID="ID_315619173" CREATED="1749097675852" MODIFIED="1749097682583"/>
</node>
<node TEXT="05.11 Trust" POSITION="bottom_or_right" ID="ID_1990445651" CREATED="1748266457045" MODIFIED="1748266459912">
<node TEXT="Table 18: Trust Profile" ID="ID_99753518" CREATED="1749097916995" MODIFIED="1749097922858"/>
</node>
</node>
<node TEXT="00. Preface" FOLDED="true" POSITION="top_or_left" ID="ID_1250732886" CREATED="1747712086744" MODIFIED="1747712091853">
<node TEXT="Mission of The Open Group: drive the creation of Boundaryless Information Flow" ID="ID_1626036026" CREATED="1747712115404" MODIFIED="1747712147392"/>
<node TEXT="The Joint Working Group aims to develop a settled consensus of core security elements, relationships, and properties - referred to collectively as the &quot;Security Overlay&quot;." ID="ID_122874273" CREATED="1747712200253" MODIFIED="1747712257126"/>
</node>
<node TEXT="01. Introduction" FOLDED="true" POSITION="top_or_left" ID="ID_391432534" CREATED="1747668068857" MODIFIED="1747668149775">
<node TEXT="01.01 Background" FOLDED="true" ID="ID_251119085" CREATED="1747712041846" MODIFIED="1747712048675">
<node TEXT="SABSA Blue Book (Executive Summary)" ID="ID_312024013" CREATED="1747792851224" MODIFIED="1747792865515" LINK="https://sabsa.org/sabsa-executive-summary/"/>
</node>
<node TEXT="01.02 The ArchiMate® Specification" ID="ID_1514485112" CREATED="1747712048846" MODIFIED="1747793346490">
<arrowlink DESTINATION="ID_1998308929"/>
<node TEXT="Figure 1； A Simple ArchiMate Diagram" ID="ID_50668471" CREATED="1747831808407" MODIFIED="1747831819126"/>
</node>
<node TEXT="01.03 Purpose" ID="ID_1338795508" CREATED="1747712065296" MODIFIED="1747712068780"/>
</node>
<node TEXT="02. Rationale for the Alignment of SABSA and ArchiMate" FOLDED="true" POSITION="top_or_left" ID="ID_1822791611" CREATED="1747668075855" MODIFIED="1747668151281">
<node TEXT="02.1 Benefits of Modeling" ID="ID_1168898154" CREATED="1748057939111" MODIFIED="1748057948751"/>
<node TEXT="02.2 The Case of an ArchiMate Security Perspective" ID="ID_870145059" CREATED="1748057949470" MODIFIED="1748057965577"/>
<node TEXT="02.3 Benefits that Modeling Can Bring to SABSA" ID="ID_1242750720" CREATED="1748057965798" MODIFIED="1748057975313"/>
<node TEXT="02.4 Benefits of Modeling to the Practitioner" ID="ID_938277925" CREATED="1748057975489" MODIFIED="1748057985147"/>
<node TEXT="02.5 Vendor Neutrality" ID="ID_1827134213" CREATED="1748057985409" MODIFIED="1748057993898"/>
</node>
<node TEXT="03. Introduction of ArchiMate" FOLDED="true" POSITION="top_or_left" ID="ID_1998308929" CREATED="1747668100492" MODIFIED="1747668152719">
<node TEXT="03.1 Core Elements" ID="ID_1116681250" CREATED="1748057997598" MODIFIED="1748058002818"/>
<node TEXT="03.2 Core Relationships" ID="ID_897208137" CREATED="1748058006589" MODIFIED="1748058025190"/>
<node TEXT="03.3 Extension Layers and Elements" FOLDED="true" ID="ID_1508528739" CREATED="1748058025887" MODIFIED="1748058032911">
<node TEXT="3.3.1 Strategy Layer" ID="ID_173742266" CREATED="1748781084980" MODIFIED="1748781090148"/>
<node TEXT="3.3.2 Motivation Elements" ID="ID_1478883973" CREATED="1748781090320" MODIFIED="1748781097524"/>
<node TEXT="3.3.3 Implementation and Migration Layer" ID="ID_916292844" CREATED="1748781101064" MODIFIED="1748781110787"/>
<node TEXT="3.3.4 Composite Elements" ID="ID_737329" CREATED="1748781114601" MODIFIED="1748781120514"/>
</node>
<node TEXT="03.4 ArchiMate Language Customization" ID="ID_1994971986" CREATED="1748058033646" MODIFIED="1748058042370">
<node TEXT="03.4.1 User-Defined Attributes" ID="ID_652248063" CREATED="1748058090164" MODIFIED="1748058099847"/>
<node TEXT="03.4.2 Specializations and &quot;Stereotypes&quot;" ID="ID_1780826726" CREATED="1748058099996" MODIFIED="1748058114161">
<node TEXT="Figure 2: In-Model versus Out-of-Model Specialization" ID="ID_290948251" CREATED="1748058118628" MODIFIED="1748058142747"/>
</node>
<node TEXT="03.4.3 Overloaded Relationships" ID="ID_1249370188" CREATED="1748058175540" MODIFIED="1748058182114"/>
</node>
<node TEXT="03.5 The ArchiMate Full Framework" ID="ID_588638179" CREATED="1748058057335" MODIFIED="1748058065401"/>
</node>
<node TEXT="04. Aligning SABSA and ArchiMate Framework" POSITION="top_or_left" ID="ID_344461701" CREATED="1747668110732" MODIFIED="1748837741636" VGAP_QUANTITY="3 pt">
<node TEXT="04.1 Introduction to the Security Overlay" ID="ID_1521200450" CREATED="1748058067237" MODIFIED="1748058075081"/>
<node TEXT="04.2 An Overview of the Task" ID="ID_415552271" CREATED="1748070675582" MODIFIED="1748070686491"/>
<node TEXT="04.3 Risk &amp; Security Modeling in the ArchiMate Specification" ID="ID_658624177" CREATED="1748070686671" MODIFIED="1749051343853">
<arrowlink DESTINATION="ID_1707637259"/>
<arrowlink DESTINATION="ID_1603541117"/>
<node TEXT="Figure 6: The Risk-Modeling Example in the ArchiMate 3.2 Specification" ID="ID_728792560" CREATED="1748177831182" MODIFIED="1748177848057"/>
<node TEXT="Figure 7: Risk Modeling Relationships" ID="ID_297337276" CREATED="1748180005899" MODIFIED="1748180015199"/>
<node TEXT="Figure 8: Mapping of Risk and Security Elements" ID="ID_1789885429" CREATED="1748180414528" MODIFIED="1748180427928"/>
<node TEXT="Figure 9: ArchiMate Motivation Metamodel" ID="ID_1464446208" CREATED="1748180438897" MODIFIED="1748180452924"/>
</node>
<node TEXT="04.4 The Basic Element and Relationships" ID="ID_832733419" CREATED="1748070699012" MODIFIED="1748070709263"/>
</node>
<node TEXT="06. Modeling Contextual Security Architecture" POSITION="bottom_or_right" ID="ID_1741078159" CREATED="1747668140692" MODIFIED="1747668176080">
<node TEXT="06.0 Overview" FOLDED="true" ID="ID_1454281063" CREATED="1749098978488" MODIFIED="1749098982100">
<node TEXT="Table 19: SABSA Contextual Architecture" POSITION="bottom_or_right" ID="ID_1189986251" CREATED="1749098234900" MODIFIED="1749098246367"/>
<node TEXT="Figure 29: Developing and Maintaining the Contextual Security Architecture" POSITION="bottom_or_right" ID="ID_851538053" CREATED="1748266465932" MODIFIED="1748266481193"/>
<node TEXT="Table 20: Contextual Elements" POSITION="bottom_or_right" ID="ID_380959367" CREATED="1749098832367" MODIFIED="1749098843826"/>
</node>
<node TEXT="06.1 Business Assets" ID="ID_1375619284" CREATED="1748266484331" MODIFIED="1748266489324">
<node TEXT="6.1.1 Capability and Value Stream" FOLDED="true" ID="ID_694837151" CREATED="1748266489330" MODIFIED="1748266499337">
<node TEXT="Table 21: The Value Stream Element" ID="ID_133549157" CREATED="1749098993174" MODIFIED="1749099007128"/>
<node TEXT="Figure 30: Value Modeling" ID="ID_758075284" CREATED="1748266502004" MODIFIED="1748266507359"/>
</node>
<node TEXT="6.1.2 Business Object" ID="ID_1456816592" CREATED="1748266514812" MODIFIED="1748266519599">
<node TEXT="Table 22: Business Object Security Properties" ID="ID_1926561917" CREATED="1749099107261" MODIFIED="1749099116983"/>
<node TEXT="Figure 31: Element Properties and SABSA Attributes" ID="ID_1338079299" CREATED="1748266522123" MODIFIED="1748266531646"/>
</node>
<node TEXT="6.1.3 Business Service, Interface, and Service Level Agreements" FOLDED="true" ID="ID_655927215" CREATED="1748266533994" MODIFIED="1748266552499">
<node TEXT="Table 23: Business Service Properties" ID="ID_1628575207" CREATED="1749099163861" MODIFIED="1749099171384"/>
</node>
</node>
<node TEXT="06.2 Business Risk" ID="ID_785104707" CREATED="1748266553133" MODIFIED="1748266558077"/>
<node TEXT="06.3 Business Process/Function/Interaction" ID="ID_1317585772" CREATED="1748266561819" MODIFIED="1748266571353"/>
<node TEXT="06.4 Business Roles and Actors" FOLDED="true" ID="ID_1514297205" CREATED="1748266575109" MODIFIED="1748266582695">
<node TEXT="6.4.1 Governance" ID="ID_1274591422" CREATED="1748266587027" MODIFIED="1748266594203">
<node TEXT="Figure 32: Representing RACI Relationships" ID="ID_1814232016" CREATED="1748266594208" MODIFIED="1748266603655"/>
<node TEXT="Figure 33: Avoid RACI Entanglement" ID="ID_1402243858" CREATED="1748266603899" MODIFIED="1748266612695"/>
<node TEXT="Figure 34: Recommended RACI Patterns" ID="ID_945033891" CREATED="1748266612853" MODIFIED="1748266620071"/>
</node>
<node TEXT="6.4.2 Threat Actors" ID="ID_1655490564" CREATED="1748266622699" MODIFIED="1748266627308">
<node TEXT="Figure 35: Possibilities for Modeling Threat Actors" ID="ID_1596807007" CREATED="1748266627310" MODIFIED="1748266636351"/>
<node TEXT="Figure 36: Sensitivity in the Representation of Threats" ID="ID_1028697950" CREATED="1748266639724" MODIFIED="1748266652543"/>
</node>
</node>
<node TEXT="06.5 Business Geography" ID="ID_584071588" CREATED="1748266656005" MODIFIED="1748266664251"/>
<node TEXT="06.6 Business Time Dependencies" ID="ID_404870642" CREATED="1748266666164" MODIFIED="1748266672274"/>
</node>
<node TEXT="07. Modeling Conceptual Security Architecture" FOLDED="true" POSITION="bottom_or_right" ID="ID_747127767" CREATED="1747668176251" MODIFIED="1747668187597">
<node TEXT="Figure 37: Developing the SABSA Conceptual Security Architecture" ID="ID_932491572" CREATED="1748266678068" MODIFIED="1748266693567"/>
<node TEXT="07.1 Attribute Profiling" ID="ID_1678146401" CREATED="1748266695236" MODIFIED="1748266704467">
<node TEXT="Figure 38: Attribute Profiling (i)" ID="ID_336292302" CREATED="1748266704473" MODIFIED="1748266713694"/>
<node TEXT="Figure 39: Attribute Profiling (ii)" ID="ID_842204527" CREATED="1748266714140" MODIFIED="1748266723401"/>
<node TEXT="Figure 40: Attribute Profiling (iii)" ID="ID_687578226" CREATED="1748266726228" MODIFIED="1748266737328"/>
<node TEXT="Figure 41: Completed Attribute Profile" ID="ID_1936370671" CREATED="1748266740621" MODIFIED="1748266751234"/>
</node>
<node TEXT="07.2 Risk Management &amp; Strategy" ID="ID_1257294361" CREATED="1748266752381" MODIFIED="1748266759680">
<node TEXT="7.2.1 Risk Management" ID="ID_1241942859" CREATED="1748266761811" MODIFIED="1748266765984">
<node TEXT="Figure 42: Business Risk Analysis Process" ID="ID_1302207429" CREATED="1748266767539" MODIFIED="1748266774966"/>
</node>
<node TEXT="7.2.2 Policy Architecture" ID="ID_1570575464" CREATED="1748266830251" MODIFIED="1748266836279">
<node TEXT="Figure 43: Compliance Metamodel" ID="ID_245422579" CREATED="1748266856707" MODIFIED="1748266874240"/>
<node TEXT="Figure 44: An Example Compliance Model" ID="ID_318510516" CREATED="1748266879242" MODIFIED="1748266887662"/>
</node>
<node TEXT="7.2.3 Multi-Regulatory Compliance" ID="ID_1245949991" CREATED="1748266971092" MODIFIED="1748266978456">
<node TEXT="Figure 45: Control Consolidation" ID="ID_414100951" CREATED="1748266980963" MODIFIED="1748266988353"/>
<node TEXT="Figure 46: Possible Duplicate Objectives, Coupled Through Attribute Profile" ID="ID_561972135" CREATED="1748266990940" MODIFIED="1748267016717"/>
</node>
</node>
<node TEXT="07.3 Conceptual Security Services" ID="ID_1412889809" CREATED="1748267022331" MODIFIED="1748267030050">
<node TEXT="Figure 47: Security Services in the Conceptual Layer" ID="ID_1966450169" CREATED="1748267030054" MODIFIED="1748267039393"/>
</node>
<node TEXT="07.4 Identity and Trust" ID="ID_237033805" CREATED="1748267043780" MODIFIED="1748267050779">
<node TEXT="7.4.1 Identity and Access Rights" ID="ID_1622742641" CREATED="1748267050781" MODIFIED="1748267055993">
<node TEXT="Figure 48: What the Security Overlay Would Like to Express" ID="ID_779187745" CREATED="1748267058638" MODIFIED="1748267071568"/>
<node TEXT="Figure 49: What the ArchiMate Specification Supports" ID="ID_732823992" CREATED="1748267071731" MODIFIED="1748267087328"/>
</node>
<node TEXT="7.4.2 Roles and Responsibilities" ID="ID_726091536" CREATED="1748267092347" MODIFIED="1748267101040">
<node TEXT="Figure 50: Modeling Identity and Role Concepts" ID="ID_835035842" CREATED="1748267102728" MODIFIED="1748267115400"/>
</node>
<node TEXT="7.4.3 Trust" ID="ID_32267264" CREATED="1748267117811" MODIFIED="1748267121079">
<node TEXT="Figure 51: Common Examples of Signals Crossing Domain Boundaries" ID="ID_1309032031" CREATED="1748267121523" MODIFIED="1748267136503"/>
<node TEXT="Figure 52: Simple Trust Relationships using Flow" ID="ID_1194057459" CREATED="1748267140251" MODIFIED="1748267154558"/>
<node TEXT="Figure 53: Trust Attributes Associated with Inter-Domain Signals" ID="ID_1858048304" CREATED="1748267475130" MODIFIED="1748267492886"/>
</node>
</node>
<node TEXT="07.5 Domain Framework Model" ID="ID_1723640648" CREATED="1748267496968" MODIFIED="1748267504336"/>
<node TEXT="07.6 Security Events" ID="ID_100637633" CREATED="1748267508808" MODIFIED="1748267512970"/>
</node>
<node TEXT="08. Modeling Logical Security Architecture" FOLDED="true" POSITION="bottom_or_right" ID="ID_138632075" CREATED="1747668187747" MODIFIED="1747668200415">
<node TEXT="Figure 54; Developing the SABSA Logical Security Architecture" ID="ID_1270087165" CREATED="1748267518672" MODIFIED="1748267531019"/>
<node TEXT="08.1 Information Assets" ID="ID_1365768468" CREATED="1748267534470" MODIFIED="1748267539094">
<node TEXT="8.1.1 Application Components" ID="ID_346699810" CREATED="1748267539100" MODIFIED="1748267545892">
<node TEXT="Figure 55: Critical Applications" ID="ID_178285523" CREATED="1748267545899" MODIFIED="1748267551565"/>
</node>
<node TEXT="8.1.2 Security Configuration" ID="ID_1459487555" CREATED="1748267554628" MODIFIED="1748267560794"/>
<node TEXT="8.1.3 Software Defects and Malware" ID="ID_812075897" CREATED="1748267560956" MODIFIED="1748267568816"/>
<node TEXT="8.1.4 Data Assets" ID="ID_1709918401" CREATED="1748267568980" MODIFIED="1748267572702"/>
</node>
<node TEXT="08.2 Risk Modeling" ID="ID_1419557817" CREATED="1748267576125" MODIFIED="1748267580044">
<node TEXT="8.2.1 Risk Modeling" ID="ID_1343985996" CREATED="1748267580048" MODIFIED="1748267584983"/>
<node TEXT="8.2.2 The Scenario" ID="ID_542475332" CREATED="1748267585116" MODIFIED="1748267591052">
<node TEXT="Figure 56: Open FAIR™ Example Scenario" ID="ID_1116919861" CREATED="1748267591060" MODIFIED="1748268411492"/>
<node TEXT="Figure 57: The Open Fair Risk Taxonomy" ID="ID_447375396" CREATED="1748268429790" MODIFIED="1748268445539"/>
<node TEXT="Figure 58: The Open FAIR Risk Taxonomy Modeled in the ArchiMate Language" ID="ID_933645503" CREATED="1748268447606" MODIFIED="1748268477114"/>
<node TEXT="Figure 59: Qualitative Example from the Open FAIR Risk Analysis Example Guide" ID="ID_96524800" CREATED="1748268550302" MODIFIED="1748268570644"/>
<node TEXT="Figure 60: Quantitative Example from the Open FAIR Risk Analysis Example Guide" ID="ID_908462043" CREATED="1748268631461" MODIFIED="1748268655266"/>
</node>
</node>
<node TEXT="08.3 Application Functionality and Services" ID="ID_543179100" CREATED="1748268675181" MODIFIED="1748268684913">
<node TEXT="Figure 61: Application Services" ID="ID_1085166888" CREATED="1748268688598" MODIFIED="1748268696923"/>
</node>
<node TEXT="08.4 Logical Access Management" ID="ID_1435882210" CREATED="1748268701613" MODIFIED="1748268783831">
<node TEXT="Figure 62: Modeling Authentication in the Primary Architecture" ID="ID_1643591284" CREATED="1748268798420" MODIFIED="1748268822466"/>
<node TEXT="Figure 63: Example of Registration and Provisioning in the Secondary Architecture" ID="ID_671162617" CREATED="1748268822728" MODIFIED="1748268844450"/>
<node TEXT="8.4.1 Account" ID="ID_820961184" CREATED="1748268954572" MODIFIED="1748268963072"/>
<node TEXT="8.4.2 Application Role" ID="ID_1472961546" CREATED="1748269010436" MODIFIED="1748269018377"/>
<node TEXT="8.4.3 Application Service" ID="ID_524143259" CREATED="1748269043060" MODIFIED="1748269049513"/>
<node TEXT="8.4.4 Application Process and Function" ID="ID_1726414508" CREATED="1748269052133" MODIFIED="1748269061362"/>
<node TEXT="8.4.5 Application Interface" ID="ID_1409129589" CREATED="1748269061556" MODIFIED="1748269067794"/>
</node>
<node TEXT="08.5 Logical Domains" ID="ID_130270014" CREATED="1748269074140" MODIFIED="1748269079471"/>
<node TEXT="08.6 Timing and Events" ID="ID_1002979283" CREATED="1748269080629" MODIFIED="1748269087339">
<node TEXT="8.6.1 Application Security Events" ID="ID_699441374" CREATED="1748269087344" MODIFIED="1748269096691"/>
</node>
</node>
<node TEXT="09. Modeling Physical Security Architecture" FOLDED="true" POSITION="bottom_or_right" ID="ID_263707404" CREATED="1747668200563" MODIFIED="1747668211797">
<node TEXT="Figure 64: Developing the SABSA Physical Security Architecture" ID="ID_556451012" CREATED="1748269109269" MODIFIED="1748269125721"/>
<node TEXT="09.1 Data and Technology Assets" ID="ID_1240008125" CREATED="1748269142750" MODIFIED="1748269154320">
<node TEXT="9.1.1 Artifact" ID="ID_1064839346" CREATED="1748269155493" MODIFIED="1748269161617">
<node TEXT="9.1.1.1 Executable" ID="ID_1839533978" CREATED="1748269436625" MODIFIED="1748269955622"/>
<node TEXT="9.1.1.2 Data" ID="ID_707728141" CREATED="1748269955785" MODIFIED="1748269959072"/>
<node TEXT="9.1.1.3 Configuration" ID="ID_1666784721" CREATED="1748269959225" MODIFIED="1748269963785">
<node TEXT="Figure 66: Configuration Files" ID="ID_523827947" CREATED="1748269963791" MODIFIED="1748269973989"/>
</node>
</node>
<node TEXT="9.1.2 Device and Node" ID="ID_1705727990" CREATED="1748269979337" MODIFIED="1748269984961">
<node TEXT="Figure 67: Stereotyping Security Nodes and Devices" ID="ID_903784309" CREATED="1748269984965" MODIFIED="1748269995288"/>
</node>
</node>
<node TEXT="09.2 Risk Management Practices" ID="ID_1816657684" CREATED="1748269997017" MODIFIED="1748270005841">
<node TEXT="9.2.1 Defect" ID="ID_983247271" CREATED="1748270005849" MODIFIED="1748270012673">
<node TEXT="Figure 68: Risk Management Practices" ID="ID_1968962453" CREATED="1748270012678" MODIFIED="1748270021516"/>
</node>
</node>
<node TEXT="09.3 Process Mechanisms" ID="ID_1109477439" CREATED="1748270024836" MODIFIED="1748270031522">
<node TEXT="Figure 69: Realization of Security Services" ID="ID_166479846" CREATED="1748270031528" MODIFIED="1748270042391"/>
<node TEXT="9.3.1 Technology Functions and Services" ID="ID_253003913" CREATED="1748270043425" MODIFIED="1748270053478"/>
<node TEXT="9.3.2 System Software" ID="ID_1293296626" CREATED="1748270055640" MODIFIED="1748270060037"/>
</node>
<node TEXT="09.4 Human-Machine Interfaces" ID="ID_857063456" CREATED="1748270060800" MODIFIED="1748270067928">
<node TEXT="9.4.1 Technology Interfaces" ID="ID_1389275021" CREATED="1748270067934" MODIFIED="1748270076454"/>
</node>
<node TEXT="09.5 Physical Environment" ID="ID_1213063958" CREATED="1748270077592" MODIFIED="1748270085503"/>
<node TEXT="09.6 Timing and Interrupts" ID="ID_1534488490" CREATED="1748270085808" MODIFIED="1748270095424">
<node TEXT="9.6.1 Technology Security Events" ID="ID_1711775504" CREATED="1748270095431" MODIFIED="1748270106768"/>
</node>
</node>
<node TEXT="10. Conclusion" POSITION="bottom_or_right" ID="ID_1163288408" CREATED="1747668215002" MODIFIED="1747668220034"/>
</node>
</map>
