@misc{862811, author = {Ronald Ross}, title = {Assessing Security and Privacy Controls in Federal Information Systems and Organizations: Building Effective Assessment Plans}, year = {2014}, month = {2014-12-10 05:12:00}, publisher = {Special Publication (NIST SP), National Institute of Standards and Technology, Gaithersburg, MD}, doi = {https://doi.org/10.6028/NIST.SP.800-53Ar4}, language = {en}, }