National Institute for Standards and Technology (NIST)

Risk Management Guide for Information Technology Systems-July 2002