Security › Module 7 › Lesson 4
Lab — Enterprise
Enterprise reference lab on `$ARCH_LAB` — TOGAF security view, EA domain map, reference arch stub bundled for LAB-ARCH-001.
Visual · t41_enterprise_lab
Lab: enterprise reference pack on YOUR $ARCH_LAB LAB-ARCH-001. Original Cyberlium.
Opening
Ship enterprise reference artifacts from YOUR lab org — TOGAF view, EA map, reference stub — zero stranger org EA theft or offensive maps.
On YOUR `$ARCH_LAB` per brief: (1) scope proof — LAB-ARCH-001 and Module 6 SABSA pack labeled; (2) TOGAF security view outline Module 7-1; (3) EA domain map Module 7-2; (4) reference architecture stub Module 7-3; (5) enterprise summary stub (domain count, capability count, gap count honesty); (6) integrity — `$ARCH_LAB` only, LAB-ARCH-001 scope, no stranger org EA theft, no offensive infrastructure design; (7) chmod 600 pack. Cross-link Module 6 SABSA — professional enterprise reference handoff.
1. Lab deliverables
TOGAF view + EA map + reference stub cross-indexed to LAB-ARCH-001.
Summary cites honest gap count — not zero-fiction enterprise completeness.
Command guide
Try these commands — Lab deliverables
═══ TOOLS & WEBSITES ═══ Browse / read these (authorized learning only — stay in YOUR lab / program scope)
SABSA — https://sabsa.org/ NIST 800-160 — https://csrc.nist.gov/publications/detail/sp/800-160/vol-1/rev-1/final TOGAF — https://www.opengroup.org/togaf
═══ INSTALL ═══
Linux (Debian/Ubuntu):
Command — copy this
sudo apt install curl
macOS: Built-in
Windows: Built-in (PowerShell: Invoke-WebRequest)
═══ LINUX / macOS ═══
Command — copy this
export ARCH_LAB=${ARCH_LAB:-$HOME/cyberlium-lab/t41-arch}
export ARCH_SABSA=${ARCH_SABSA:-$ARCH_LAB/LAB-ARCH-001/sabsa}
cat > "$ARCH_SABSA/attribute-stub.md" <<'EOF'
# SABSA Attribute Stub — LAB-ARCH-001
| Business attribute | Security goal | Example control (defensive) | Layer |
|--------------------|---------------|----------------------------|-------|
| Confidentiality | Prevent PII disclosure | TLS + encryption at rest + RBAC | Logical |
| Integrity | Detect order tampering | HMAC/signing + DB constraints | Component |
| Availability | Maintain order API uptime | Multi-AZ + autoscale + DR drill | Physical |
| Accountability | Attribute admin actions | Central audit log + MFA | Operational |
| Privacy | Minimize PII collection | Data minimization + retention policy | Contextual |
LAB SAMPLE — SABSA traceability literacy — NOT certified architecture
EOFCommand — copy this
cat > "$ARCH_SABSA/attribute-trace-order-api.md" <<'EOF' # SABSA Trace — Order API — LAB-ARCH-001 **Attribute:** Integrity **Contextual:** Customer trust in order accuracy **Logical:** Validate schema + idempotency keys **Component:** API GW JSON schema validation plugin **Operational:** Weekly log review for validation failures (fictional) LAB SAMPLE — attribute-to-control trace stub EOF
Command — copy this
grep -E 'Confidentiality|Integrity|LAB SAMPLE' "$ARCH_SABSA/attribute-stub.md" "$ARCH_SABSA/attribute-trace-order-api.md" cat > "$ARCH_LAB/notes/sabsa-lab-summary.md" <<'EOF' # SABSA Lab Summary — YOUR lab - sabsa-named.txt + sabsa-layers.md + sabsa-attributes-named.txt: literacy - attribute-stub.md + attribute-trace-order-api.md: traceability stubs ## Integrity - Fictional LAB-ARCH-001 — SABSA literacy not certification EOF
Command — copy this
grep -E 'attribute-stub|Integrity' "$ARCH_LAB/notes/sabsa-lab-summary.md" curl -sS https://sabsa.org/ | head -3
═══ WINDOWS ═══
Command — copy this
Get-Content $HOME/cyberlium-lab/t41-arch/LAB-ARCH-001/sabsa/attribute-stub.md | Select-String LAB
Primary tools to practice this lesson: grep, curl. Reference sites: SABSA (https://sabsa.org/); NIST 800-160 (https://csrc.nist.gov/publications/detail/sp/800-160/vol-1/rev-1/final); TOGAF (https://www.opengroup.org/togaf). Run every command in the box — install first, then the usage lines — only on YOUR lab / program scope.
2. Quality bar
Diagrams LAB-labeled — not stranger org or prod architecture exports.
Zero offensive infrastructure or bypass annotation files in pack.
3. Teardown
Secure notes chmod 600; enterprise pack ready for control selection module.
Archive stub optional per brief.
4. What you ship: enterprise lab pack
TOGAF view + EA map + reference stub + summary + integrity — chmod 600.
5. What you record before the next lesson
Enterprise lab pack path.
6. Wrong vs right: offensive playbooks vs YOUR threat models
Worked failure — same MSF word, opposite target. Right never needs a café Wi-Fi or classmate laptop.
Wrong
Enterprise lab includes stranger org EA repository export as bonus deliverable.
Right
Enterprise lab pack on `$ARCH_LAB` LAB-ARCH-001. Next: quiz.
Mission: enterprise lab
1) Scope and Module 6 SABSA proof. 2) TOGAF view and EA domain map. 3) Reference architecture stub. 4) Integrity block; chmod 600.
Stuck? Ask Cyberlium AI Mentor
Ask Mentor: “Enterprise summary — minimum honesty rows?”
Knowledge Check
APPLY: Enterprise lab scope:
Multiple choice
Knowledge Check
APPLY: True or False: Stranger org EA exports earn enterprise lab credit.
True or False
Knowledge Check
APPLY: Enterprise lab pack should:
Multiple choice