[0] Physical [Motivation (Why)] Security rules, practices and procedures [Process (How)] Security mechanisms [People (Who)] Users, applications and user interface [Location (Where)] Platform and network infrastructure [Time (When)] Control structure execution [Assets (What)] 
Business data model