[0] Logical [Assets (What)] Business information model [Motivation (Why)] Security policies [People (Who)] Entity schema and privilege profiles [Location (Where)] Security domain definitions and associations [Time (When)] Security processing cycle [Process (How)] 
Security services