@misc{9471, author = {Ronald Ross and L Johnson and Stuart Katzke and Patricia Toth and G. Stoneburner and G Rogers}, title = {Guide for Assessing the Security Controls in Federal Information Systems: Building Effective Security Assessment Plans}, year = {2008}, month = {2008-07-01}, publisher = {Special Publication (NIST SP), National Institute of Standards and Technology, Gaithersburg, MD}, language = {en}, }