A large financial company has a team of security-focused architects and designers that contribute
into broader IT architecture and design solutions. Concerns have been raised due to the security
contributions having varying levels of quality and consistency. It has been agreed that a more
formalized methodology is needed that can take business drivers, capabilities, baselines, and reusable patterns into account. Which of the following would BEST help to achieve these objectives?

A.
Construct a library of re-usable security patterns

B.
Construct a security control library

C.
Introduce an ESA framework

D.
Include SRTM in the SDLC