Architecture -
How to protect from outside threat.
How to manage inside threat.

Documentation -
What you need to get through the accreditation phase.
What you need to deliver for customer acceptance.
What you need to deliver for maintenance and support.

Maintenance -
How to know if you are subject to IAV/[AB].
How to securely apply patches.
How to store off-site backup data.
How to securely restore a system.