@misc{9196, author = {Ronald Ross and L Johnson}, title = {Guide for Applying the Risk Management Framework to Federal Information Systems: a Security Life Cycle Approach}, year = {2010}, month = {2010-02-22}, publisher = {Special Publication (NIST SP), National Institute of Standards and Technology, Gaithersburg, MD}, language = {en}, }