[0] Logical [Assets (What)] Business information model [Motivation (Why)] Security policies [Process (How)] Security services [People (Who)] Entity schema and privilege profiles [Location (Where)] Security domain definitions and associations [Time (When)] 
Security processing cycle