@misc{1127621, author = {Ronald S. Ross}, title = {Assessing Security and Privacy Controls in Federal Information Systems and Organizations::Building Effective Assessment Plans}, year = {2014}, month = {2014-12-01 05:12:00}, publisher = {, National Institute of Standards and Technology, Gaithersburg, MD}, doi = {https://doi.org/10.6028/NIST.SP.800-53Ar4}, language = {en}, }