TY - RPRT TI - Guide for assessing the security controls in federal information systems and organizations : building effective security assessment plans AU - Ross, R AU - Johnson, L A AU - Katzke, S AU - Toth, P AU - Stoneburner, G AU - Rogers, G PY - 2008 PB - National Institute of Standards and Technology CY - Gaithersburg, MD SN - NIST SP 800-53a DO - 10.6028/NIST.SP.800-53a ER -