The Sherwood Applied Business Security Architecture (SABSA) provides a tool to translate business requirements into security controls.

Having implemented this himself, Steve Jump discussed the process with Tony.