2.1 Foundational Security Management2.2 Subcomponents2.2.1 Command and Control Management2.2.2 Security Policy Management2.2.3 Risk and Compliance Assessment2.2.4 Identity, Access, and Entitlement Management2.2.5 Data and Information Protection Management2.2.6 Software, System, and Service Assurance2.2.7 Threat and Vulnerability Management2.2.8 IT Service Management2.2.9 Physical Asset Management2.3 Conclusion