google around for various "Controls" both physical and logical. they should give you more ideas on what to cover. and put extra attention on Physical coz most people always miss it.

oh and it helps to expect the unimaginable. and also see the environment on what ur project is running on. i.e. the compitency of the people involved.