[0] Logical [Assets (What)] Business information model [Motivation (Why)] Security policies [Process (How)] Security services [Location (Where)] Security domain definitions and associations [Time (When)] Security processing cycle [People (Who)] 
Entity schema and privilege profiles