Assets + Protection of PII
CIA Triad
Data Classification
Threat (STRIDE)
Vulnerability
Risk Management
Privacy