OG0-092: TOGAF 9 Part 2 Exam

The Preliminary Phase establishes the enterprise architecture capability, including governance, policies, and architecture principles. Security and regulatory concerns must be reflected in security policy and in principles that constrain subsequent architecture work. Because security is a cross-cutting concern, a security architect should participate in planning across all architecture domains, not be limited to a separate domain or only implementation oversight.