Security Architecture - What, How, Where, Who, When, Why
Our EACOE Enterprise Architecture practice looked at security as part of Enterprise Architecture, not as a separate activity. Starting with this objective is key. In the physical world, look at the Ring doorbell – warn me before someone enters the house, rather than telling me someone is in the house.
This comes from REAL Enterprise Architecture. Security is a Business Strategy first - not only an implementation technology concern.