Risk Management Guide for Information Technology Systems, Recommendations of the National Institute of Standards and Technology, Gary Stoneburner, Alice Goguen, and Alexis Feringa located at http://csrc.nist.gov