[Assets (What)] Business information model [Motivation (Why)] Security policies [Process (How)] Security services [People (Who)] Entity schema and privilege profiles [Location (Where)] Security domain definitions and associations [Time (When)] Security processing cycle [0] 
Logical
C o n t e x t u a l
C o n c e p t u a l
L o g i c a l
P h y s i c a l
C o m p o n e n t
O p e r a t i o n a l