Why TOGAF is useful for security architecture TOGAF is an enterprise architecture method, not a security framework. That distinction matters. If you try to use TOGAF as if it were a control catalogue, ...
EOFY is a sensible moment to test that alignment honestly, rather than letting inertia make the decision by default.