1. Business Continuity requires a
Security Architecture to
reduce risk and cost
Jeff Primus
CEO & Principal Advisor

2. 2
JEFF PRIMUS
Founder, CEO & Principal Advisor @ ACTAGIS
Advisor, experienced manager & expert of the subject, since over 25 years
Actively implements ISO compliant, Governance, Cyber Security, Risk & Business Continuity, management
Systems for the public sector and multinational companies in Switzerland, Europe and the Middle-East.
Official & accredited PECB, ISACA and BCI, trainer for several courses, including the ISO 22301, CBCI, GDPR-
CDPO, ISO 31000, ISO 27001, ISO 20000, ISO 9001, ISO 27005, CGEIT, CRISC, CISA, CISM, CISSP, SABSA-
SCF, and COBIT5 (teaching more than 10 years in English, French, Turkish).
Lead lecturer at Sorbonne-Paris-1 and at Geneva Universities for Cyber Security, Governance, Business
Continuity, Risk Management, publishes articles and performs on radio and television shows.
Board member of ISACA Switzerland. He has been an active participant in the SC27 Workgroup, which co-
defines the new releases of the ISO/IEC 27001 standard
Contact information
+41 21 353 03 30
team@actagis.ch
www.actagis.ch
https://ch.linkedin.com/in/jeffprimus
https://twitter.com/ACTAGIS
https://www.facebook.com/actagis

3. 3
Agenda

4. 4
Cyber Security & Risk Management
Landscape
 The frequency of cyber-attacks continues to increase at
an unparalleled pace
 According recent studies, the number of security
incidents across all industries rose by 38% in 2015
 By attacking the most vulnerable value chains of
organizations, they result in
 information confidentiality & integrity breaches
 discontinuity of business activities and
 huge financial and reputational damages
 Historically, the information System is considered
predominantly as a technological issue

5. 5
Business Continuity Management (BCM)
Landscape
 Lack of historical synergies between BCM and ISSM
 But things are changing because of the rise of cyber
threats
 The synergies are essential in order to implement an
efficient BCM taking care also the ISSM
 Standards and frameworks exist but lack
methodological approach to address existing gaps
 So, how can we enable the synergies ?

6. 6
Business across multiple layers

7. 7

8. 8
ISO 22301 Standard

9. 9

10. 10
SABSA: Enterprise
Security Architecture

11. 11
SABSA matrix and processes
© Jeff Primus – 2018 – www.actagis.ch - Based on www.sabsa.org

12. 12

13. 13
Linkage between ISO 22301 & SABSA

14. 14
Linkage between ISO 22301 & SABSA
© Jeff Primus – 2018 – www.actagis.ch - Based on www.iso.org & www.sabsa.org

15. 15
Linkage between ISO 22301 & SABSA

16. 16
Thank you !
Contact information
+41 21 353 03 30
team@actagis.ch
www.actagis.ch
https://ch.linkedin.com/in/jeffprimus
https://twitter.com/ACTAGIS
https://www.facebook.com/actagis
Questions