Which statement best describes the role of architecture frameworks in ISSAP?

• A. They are only used for compliance reporting and have no architectural impact.
• B. They are primarily concerned with selecting vendor products.
• C. They provide structure for developing, maintaining, and aligning security with business goals.
• D. They mandate a single, universal security control for all systems.

Answer: (C)