Establishes confidentiality, integrity, availability, authentication, authorization, accountability, least privilege, defense in depth, and secure failure as practical decision tools.