There should be a feasible, manageable migration path, acceptable to the business users, that moves from an old system to a new one, or from one released version to the next.
namespace
SABSA
stereotype
TechnicalAttribute
hardMetric
Independent audit and review against Security Architecture Capability Maturity Model of technical architecture (conceptual, logical and physical)