@misc{4186,
  author = {Ronald Ross},
  title = {Recommended Security Controls for Federal Information Systems and Organizations [includes updates through 9/14/2009]},
  year = {2009},
  month = {2009-09-14},
  publisher = {Special Publication (NIST SP), National Institute of Standards and Technology, Gaithersburg, MD},
  language = {en},
}