TY - RPRT TI - An analytical approach to cost-effective, risk-based budgeting for federal information system security AU - Lippiatt, Barbara C AU - Fuller, Sieglinde K PY - 2007 PB - National Institute of Standards and Technology CY - Gaithersburg, MD SN - NIST IR 7385 DO - 10.6028/NIST.IR.7385 ER -