@misc{9241, author = {Ronald Ross}, title = {Managing Information Security Risk: Organization, Mission, and Information System View}, year = {2011}, month = {2011-03-01}, publisher = {Special Publication (NIST SP), National Institute of Standards and Technology, Gaithersburg, MD}, url = {https://tsapps.nist.gov/publication/get_pdf.cfm?pub_id=908030}, language = {en}, }