TY - RPRT TI - Assessing Security and Privacy Controls in Federal Information Systems and Organizations: Building Effective Assessment Plans AU - Ross, Ronald S. PY - 2014 PB - National Institute of Standards and Technology SN - NIST SP 800-53Ar4 DO - 10.6028/NIST.SP.800-53Ar4 ER -