Security Entity Model & Trust Framework

Security Entity Model and Trust Framework

Please refer to Chapter 3, Figure 3-3 and Chapter 7, Figure 7-6, the SABSA® Matrix, Conceptual Layer, People column, where you will see a cell entitled Security Entity Model and Trust Framework. In Chapter 7, Figure 7-5 this also appears as key deliverable of the conceptual security architecture.

Security Entities

A security entity is something or someone that can take actions in a business environment. These actions need to be controlled through authorization processes and through technical and procedural controls that enforce the authorizations. Security entities are of several types:

• Individual personal entities (people)
• Corporate entities (organizations or organizational units, whether legally recognized as entities or not)
• Application or system entities – automated processes that act on behalf of personal or corporate entities