Focuses on ongoing management, monitoring, and measuring ROI. Key Principles of a Business-Driven Approach Enterprise security architecture a business-driven approach