@misc{4191, author = {Ronald Ross}, title = {Recommended Security Controls for Federal Information Systems and Organizations [includes updates through 8/12/2009]}, year = {2009}, month = {2009-08-12}, publisher = {Special Publication (NIST SP), National Institute of Standards and Technology, Gaithersburg, MD}, language = {en}, }