People, Processes, Technology, Data, and Facilities (PPTDF)

This is a somewhat contentious topic in the cybersecurity community. When you are discussing the scope of applicability for controls, is it: Limited to People, Processes & Technology (PPT)?Inclusive of data with People, Processes, Technology & Data (PPTD)? orComprehensive to include phys …