@misc{58421,
  author = {Shirley Radack},
  title = {Assessing the Effectiveness of Security Controls in Federal Information Systems},
  year = {2010},
  month = {2010-08-23},
  publisher = {ITL Bulletin, National Institute of Standards and Technology, Gaithersburg, MD},
  url = {https://tsapps.nist.gov/publication/get_pdf.cfm?pub_id=906601},
  language = {en},
}