TY - RPRT TI - Managing information security risk : organization, mission, and information system view PY - 2011 PB - National Institute of Standards and Technology CY - Gaithersburg, MD SN - NIST SP 800-39 DO - 10.6028/NIST.SP.800-39 ER -