Our EACOE Enterprise Architecture practice looked at security as part of Enterprise Architecture, not as a separate activity.

Starting with this objective is key. In the physical world, look at the Ring doorbell – warn me before someone enters the house, rather than telling me someone is in the house. This comes from REAL Enterprise Architecture. Security is a Business Strategy first - not only an implementation technology concern.