A key feature of governance is to define and manage security controls on the enterprise architecture (EA). Governance includes establishing the roles with the authority to approve security policies and the roles with the responsibility for developing, publishing, enforcing, and measuring compliance with security policies for the EA.

In a three page MS Word document, explain the following:

• 3considerations that guide the formulation of specific security policies
• How management in an organization may define and manage these security controls