 The primary purpose of creating an enterprise information security architecture is to ensure that business strategy and IT security are aligned.As such, enterprise information security architecture allows traceability from the business strategy down to the underlying technology.Enterprise information security architecture was first formally positioned by Gartner in their whitepaper called “"Incorporating Security into the Enterprise Architecture Process"”.