process of creating a design that will support the enterprise's mission statement
the process of creating a design that will support the organization's mission statement and objectives for the required database
written statement describing which assets to protect and why they are being protected, who is responsible for that protection, and which behaviors are acceptable and which are not.