Curricula model validation

In the last years I have been involved in several education and training initiatives in the Information Systems Security domain. From several reports, contacts, scientific works and experiences, I found a curricula model with which I start feeling very comfortable. As we (university) are now working on a new post graduation project, I would like to validate this model.

In a very simplistic way, at the lower level we find the fundamental science disciplines which support the knowledge students may develop during a Cyber Security program (obviously, not all of them are required for a given specialization). The second level represents the main topics (body of knowledge) that forms the IS Security domain. The upper levels represent frameworks for conducting learning activities - basically Security Engineering, Security Management and Cyber Law/regulation

Is this complete? Does it fail to represent certain education or training programs?...