[0] Component [Assets (What)] Detailed data structures [Motivation (Why)] Security standards [People (Who)] Identities, functions, actions and ACLs [Location (Where)] Processes, nodes, addresses and protocols [Time (When)] Security step timing and sequencing [Process (How)] 
Security products and tools