[Assets (What)] Business data model [Motivation (Why)] Security rules, practices and procedures [Process (How)] Security mechanisms [People (Who)] Users, applications and user interface [Location (Where)] Platform and network infrastructure [Time (When)] Control structure execution [0] 
Physical
C o n t e x t u a l
C o n c e p t u a l
L o g i c a l
P h y s i c a l
C o m p o n e n t
O p e r a t i o n a l