[0] Component [Assets (What)] Detailed data structures [Process (How)] Security products and tools [People (Who)] Identities, functions, actions and ACLs [Location (Where)] Processes, nodes, addresses and protocols [Time (When)] Security step timing and sequencing [Motivation (Why)] 
Security standards