This work presents a framework for developing enterprise security architecture. The Sherwood Applied Business Security Architecture (SABSA) model is generic and defines a process for architecture development, with each solution unique to the individual business. Security architecture issues are related to business requirements using charts, graphs,