[0] Component [Assets (What)] Detailed data structures [Motivation (Why)] Security standards [Process (How)] Security products and tools [Location (Where)] Processes, nodes, addresses and protocols [Time (When)] Security step timing and sequencing [People (Who)] 
Identities, functions, actions and ACLs