As the newly hired chief information security officer (CISO), you are tasked with developing the Best Care Community (BCC) hospitals information security program. There is no information security program in place, and your first task is to create the enterprise information security strategy that encompasses the companys mission, goals, and objectives, as well as appropriately reflects the risk tolerance and risk appetite of the company as a whole.

Write a 2- to 3-page report using Microsoft Word that recommends one of the enterprise control frameworks. Your report should:

Describe your chosen enterprise architecture framework.

Determine how the business objectives correspond to the information security strategic objectives.

Explain how the enterprise architecture framework can be used to achieve business and information security alignment.