In a company the IT strategy is migrating towards a Service Oriented Architecture (SOA) so that migrating to the cloud i

[answerhappygod]

In a company the IT strategy is migrating towards a Service Oriented Architecture (SOA) so that migrating to the cloud is better feasible in the future. The security architect is asked to make a first draft of the security architecture.
Which elements should the security architect draft?

A. Management and control of the security services
B. The information security policy, the risk assessment and the controls in the security services
C. Which security services are provided and in which supporting architectures are they defined