SABSA Implementation

Generic Approach

PART IV

ROLE & RESPONSIBILITY CONCEPTS

Scope: Strategy & Planning Phase -People

SABSA Corporate Governance Model

SABSA Domain Model – RACI Overlay

Service Provider Custodian Role

Security Service Manager As Custodian

Roles & Responsibilities In Risk Aggregation

Risk appetite and policy is communicated and distributed top-down in a SABSA domain model

Risk performance and policy compliance is communicated and aggregated bottom-up in a SABSA domain model

END OF PART IV