SABSA Architecture

Sample Request

{
  "sessionId": "session-2024-001-abc",
  "userId": 12345,
  "timestamp": "2024-01-15T10:30:00Z",
  "assessmentData": {
    "sessionId": "session-2024-001-abc",
    "timestamp": "2024-01-15T10:30:00Z",
    "layers": {
      "contextual": {
        "assets": [
          {
            "name": "Customer Data Repository",
            "classification": "Confidential",
            "value": "Critical"
          }
        ],
        "motivation": [
          {
            "objective": "Data Protection",
            "priority": "High"
          }
        ],
        "process": [
          {
            "name": "Data Encryption Process",
            "status": "Implemented"
          }
        ],
        "people": [
          {
            "role": "Data Steward",
            "count": 5,
            "trained": true
          }
        ],
        "location": [
          {
            "datacenter": "Primary US East",
            "compliance": "SOC 2"
          }
        ],
        "time": [
          {
            "phase": "Operational",
            "duration": "24/7"
          }
        ]
      },
      "conceptual": {
        "assets": [],
        "motivation": [],
        "process": [],
        "people": [],
        "location": [],
        "time": []
      }
    }
  }
}

Sample Response

{
  "status": "success",
  "sessionId": "session-2024-001-abc",
  "assessmentId": "assess-2024-001-xyz",
  "timestamp": "2024-01-15T10:30:45Z",
  "maturityScores": {
    "contextual": {
      "overall": 3.2,
      "assets": 3.5,
      "motivation": 3.0,
      "process": 3.1,
      "people": 2.8,
      "location": 3.3,
      "time": 3.0
    },
    "conceptual": {
      "overall": 2.1,
      "assets": 2.0,
      "motivation": 2.2,
      "process": 2.1,
      "people": 2.0,
      "location": 2.0,
      "time": 2.0
    }
  },
  "recommendations": [
    {
      "layer": "contextual",
      "dimension": "people",
      "finding": "Security awareness training coverage at 80%",
      "priority": "High",
      "action": "Expand training program to achieve 100% coverage"
    }
  ],
  "gaps": [
    {
      "layer": "conceptual",
      "dimension": "process",
      "gap": "Absence of formal security architecture review process",
      "impact": "Medium"
    }
  ]
}