The concept of Enterprise Architecture (EA) has become increasingly common within enterprises today and aims to describe an enterprise?s structure in a standardized way. Implementing EA within an enterprise is a way to describe the how various domains affect each other and by defining uniform procedures and guidelines, particularly in the link between IT-activities and business activities, you can streamline you enterprise. An effective EA is a huge asset for an enterprise since it enables the full usage of the business potential of the IT-domain. However a malfunctioning EA can lead to an enormous drain of valuable organizational resources.

Information security is an essential part of all information systems; especially in large organizations and companies dealing with classified material. Every large information system has an architecture that includes many parts that together form an Enterprise Architecture. The aim of this thesis is to study how to describe several security functions in an Enterprise Architecture and also how to ensure accountability between requirements and the implementation of the security functions. The description is for stakeholders on a conceptual level rather than a technical level. The study has been carried out by comparing the theoretical framework that has been formed by a study of the literature, and the empirical framework that has been formed by a group discussion and interviews with Information Security Consultants from Combitech AB.

Förändringar i affärsvärlden leder till att företag idag ständigt ställs inför nya utmaningar. Samverkan mellan affärsverksamheten och IT har därför blivit en viktig aspekt inom organisationer. Företag står inför problemet att hantera sina komplexa affärsprocesser, information och infrastruktur, relaterat till att IT bör ge maximala värden för affärsprocesserna. Det för att verksamheterna ska vara med i spelet bland de konkurrenskraftiga organisationerna, vilket leder till en av anledningar till att företagen kommer i kontakt med Enterprise Architecture (EA). EA kan ses som en helhetsbild av organisationen och dess information, applikationer och infrastruktur.