@misc{205616,
  author = {Shirley Radack},
  title = {Security Assessments: Tools for Measuring the Effectiveness of Security Controls},
  year = {2008},
  month = {2008-08-21},
  publisher = {ITL Bulletin, National Institute of Standards and Technology, Gaithersburg, MD},
  url = {https://tsapps.nist.gov/publication/get_pdf.cfm?pub_id=890063},
  language = {en},
}