A structured look at what data to collect for security purposes and when to collect it.