Enterprise Architecture (EA) provides organizations with an effective and efficient technique to manage their information technology (IT) systems. EA allows organizations to align their business needs with the required IT resources. Therefore, several enterprise architecture frameworks have been developed for several purposes depending on the organizations’ objectives. These include achieving their vision in an effective approach and reducing complexity and cost of their systems. These frameworks also aim to make systems collaborate in the most efficient way. However, these EA frameworks pay little attention to endorsing security of the organizations. Specifically, they mostly focus on the organizations business needs and ignore the fact that securing their IT systems is crucial. This will eventually result in making these organizations at a higher risk of security attacks. This paper surveys the most common enterprise architecture frameworks in literature. It illustrates their objectives and the types of organisations deploy them. It also defines the principles that these frameworks aim to follow in order to achieve the organizations mission. The paper also surveys a number of security design principles that are critical for any organization to follow in order to protect it assets. Towards the end of this paper, a critique review of these frameworks and a suggested approach for applying security with regard to certain security design principles at an early stage of development.

Enterprise Architecture Frameworks Enterprise Architecture Principles Security Design Principles Security Metrics