[Assets (What)] Business attributes profile [Motivation (Why)] Control objectives [Process (How)] Security strategies and architectural layering [People (Who)] Security entity model and trust framework [Location (Where)] Security domain model [Time (When)] Security-related lifetime and deadlines [0] 
Conceptual
C o n t e x t u a l
C o n c e p t u a l
L o g i c a l
P h y s i c a l
C o m p o n e n t
O p e r a t i o n a l