Security Services Domain Model / Worked Examples
Worked Examples
The abstract model is only useful once you can see it made concrete. Each example below instantiates every concept in the base Security Services Domain Model — the same eighteen concepts, the same SABSA chain — for a real, named scenario. Open the base model in another tab and compare them side by side.
Identity & Access Management
Securing workforce and privileged access under ISO 27001 and NIST 800-63: MFA, least privilege, and the identity provider stack behind them.
Open examplePayment Services
Moving money safely under PSD2, PCI-DSS and AML: fraud screening, Strong Customer Authentication, and the platforms that enforce them.
Open exampleAI Governance
Using AI responsibly under the EU AI Act and ISO 42001: model validation, bias evaluation, and MLOps oversight.
Open exampleFirewall & Network Security
Connecting logging, encrypted-traffic inspection, segmentation and edge policy to the mechanisms, systems and products that enforce them. Includes the original detailed A0 PDF.
Open example