Question 1
IntermediateArchitecture Domains and Frameworks · Architecture Frameworks
A multinational financial institution is restructuring its enterprise architecture practice. The Chief Information Security Officer (CISO) mandates that the architecture team must adopt a formal framework specifically focused on defining the taxonomy and conceptual structure of cybersecurity knowledge, rather than a process for developing security architecture. Which framework should the architecture team select to meet this requirement?
Answer and explanation
Correct answer: A
CyBOK (Cyber Security Body of Knowledge) is specifically designed to provide a comprehensive taxonomy and conceptual structure for cybersecurity knowledge, acting as a foundational reference rather than a developmental methodology. SABSA is a methodology and framework for developing risk-driven enterprise information security architectures. TOGAF is a general enterprise architecture process framework, and ISO 27001 is a standard for Information Security Management Systems.
