The Sherwood Applied Business Security Architecture (SABSA) provides a tool to translate business requirements into security controls. Having implemented this himself, Steve Jump discussed the process with Tony.