Granularity: We discussed this already
• Actor type: Human, IT System, or both
• Channel: Telephone, web, and so on
• Security level: Public or confi dential
• Organizational boundaries: Departmental, enterprise, and external
• Architectural layer: Business, information, and technical architecture