Computer Security Incident Handling Guide : Recommendations of the National Institute of Standards and Technology

Guide to test, training, and exercise programs for IT plans and capabilities

Grance, T., Nolan, T., Burke, K., Dudley, R., White, G., & Good, T. (2006) · doi:10.6028/nist.sp.800-84 · Cited by 41

Recommended security controls for federal information systems and organizations

Ross, R., Katzke, S. W., Johnson, L. A., Swanson, M., Stoneburner, G., & Rogers, G. (2007) · doi:10.6028/nist.sp.800-53r2 · Cited by 8

Intelligent Detection and Recovery from Cyberattacks for Small and Medium-Sized Enterprises.

López, M. Á., Lombardo, J. M., López, M., Alba, C. M., Velasco, S., Braojos, M. A., & García, M. F. (2020) · International Journal of Interactive Multimedia and Artificial Intelligence · doi:10.9781/ijimai.2020.08.003 · Cited by 22

Prevention and mitigation measures against phishing emails: a sequential schema model

Suzuki, Y. E., & Monroy, S. A. S. (2021) · Security Journal · doi:10.1057/s41284-021-00318-x · Cited by 22

Operations-informed incident response playbooks

Shaked, A., Cherdantseva, Y., Burnap, P., & Maynard, P. (2023) · Computers & Security · doi:10.1016/j.cose.2023.103454 · Cited by 22

A roadmap to risk-aware business process management

Jakoubi, S., Neubauer, T., & Tjoa, S. (2009) · IEEE Asia-Pacific Services Computing Conference (APSCC) · doi:10.1109/apscc.2009.5394145 · Cited by 22

Computer Incident Response and Forensics Team Management: Conducting a Successful Incident Response

Johnson, L. A. (2013) · CERN Document Server (European Organization for Nuclear Research) · Cited by 22

Strategic Approach to Information Security in Organizations

Park, S., & Ruighaver, T. (2008) · International Conference on Information Science and Security (ICISS) · doi:10.1109/iciss.2008.44 · Cited by 22

Guidelines on active content and mobile code

Jansen, W., Winograd, T., & Scarfone, K. A. (2008) · doi:10.6028/nist.sp.800-28ver2 · Cited by 22

Security and Privacy Controls for Information Systems and OrganizationsPreprint

Joint Task Force Transformation Initiative (2020) · doi:10.6028/nist.sp.800-53r5-draft · Cited by 22

The Best Laid Plans or Lack Thereof: Security Decision-Making of Different Stakeholder Groups

Shreeve, B., Hallett, J., Edwards, M., Ramokapane, K. M., Atkins, R., & Rashid, A. (2020) · IEEE Transactions on Software Engineering · doi:10.1109/tse.2020.3023735 · Cited by 21

SoK: Applications and Challenges of using Recommender Systems in Cybersecurity Incident Handling and Response

Husák, M., & Čermák, M. (2022) · International Conference on Availability, Reliability and Security (ARES) · doi:10.1145/3538969.3538981 · Cited by 21

Rationality constraints in cyber defense: Incident handling, attribution and cyber threat intelligence

Hettema, H. (2021) · Computers & Security · doi:10.1016/j.cose.2021.102396 · Cited by 21

Improving the redistribution of the security lessons in healthcare: An evaluation of the Generic Security Template

He, Y., & Johnson, C. (2015) · International Journal of Medical Informatics · doi:10.1016/j.ijmedinf.2015.08.010 · Cited by 20

Minimizing Eavesdropping Risk by Transmission Power Control in Multihop Wireless Networks

Kao, J.-C., & Mărculescu, R. (2007) · IEEE Transactions on Computers · doi:10.1109/tc.2007.1066 · Cited by 20

CYRA: A Model-Driven CYber Range Assurance Platform

Smyrlis, M., Somarakis, I., Spanoudakis, G., Hatzivasilis, G., & Ioannidis, S. (2021) · Applied Sciences · doi:10.3390/app11115165 · Cited by 19

Research on the Effectiveness of Cyber Security Awareness in ICS Risk Assessment Frameworks

Wang, K., Guo, X. M., & Yang, D. (2022) · Electronics · doi:10.3390/electronics11101659 · Cited by 19

Data Integrity: Detecting and Responding to Ransomware and Other Destructive Events

Cawthra, J., Ekstrom, M., Lusty, L., Sexton, J., & Sweetnam, J. (2020) · doi:10.6028/nist.sp.1800-26 · Cited by 19

Generative Artificial Intelligence in Marketing: The Invisible Danger of AI Hallucinations

Yaprak, B. (2024) · Journal of Economy Business and Management · doi:10.7596/jebm.1588897 · Cited by 19

Incident Management Capability Metrics Version 0.1

Dorofee, A., Killcrece, G., Ruefle, R., & Zajicek, M. (2007) · doi:10.21236/ada468688 · Cited by 18

Current practices and challenges in industrial control organizations regarding information security incident management – Does size matter? Information security incident management in large and small industrial control organizations

Line, M. B., Tøndel, I. A., & Jaatun, M. G. (2015) · International Journal of Critical Infrastructure Protection · doi:10.1016/j.ijcip.2015.12.003 · Cited by 17

Governing for Enterprise Security (GES) Implementation Guide

Westby, J. R., & Allen, J. (2007) · Figshare · doi:10.1184/r1/6574010 · Cited by 17

DNS Covert Channel Detection via Behavioral Analysis: a Machine Learning ApproachPreprint

Saeli, S., Bisio, F., Lombardo, P., & Massa, D. (2020) · arXiv (Cornell University) · doi:10.48550/arxiv.2010.01582 · Cited by 17

Enhancing Security Operations Center: Wazuh Security Event Response with Retrieval-Augmented-Generation-Driven Copilot

Ismail, Kurnia, R., Widyatama, F., Wibawa, I. M., Brata, Z. A., Ukasyah, Nelistiani, G. A., & Kim, H. (2025) · Sensors · doi:10.3390/s25030870 · Cited by 16

Cybersecurity program for Philippine higher education institutions: A multiple-case study

Ramos, N. M. D., & Esponilla, F. D. (2022) · International Journal of Evaluation and Research in Education (IJERE) · doi:10.11591/ijere.v11i3.22863 · Cited by 16

Malware fuzzy ontology for semantic web

Tafazzoli, T., & Sadjadi, S. H. (2008) · Cited by 16

Towards a Data-Driven Recommender System for Handling Ransomware and Similar Incidents

Husák, M. (2021) · IEEE International Conference on Intelligence and Security Informatics (ISI) · doi:10.1109/isi53945.2021.9624774 · Cited by 16

Building a Scalable Security Operations Center: A Focus on Open-source Tools

Bassey, C., Chinda, E. T., & Idowu, S. (2024) · Journal of Engineering Research and Reports · doi:10.9734/jerr/2024/v26i71203 · Cited by 15

Study of internet security threats among home users

Rao, U. H., & Pati, B. P. (2012) · International Conference on Computational Aspects of Social Networks (CASoN) · doi:10.1109/cason.2012.6412405 · Cited by 15

A Case Study: Preparing for the Smart Grids - Identifying Current Practice for Information Security Incident Management in the Power Industry

Line, M. B. (2013) · International Conference on IT Security Incident Management and IT Forensics (IMF) · doi:10.1109/imf.2013.15 · Cited by 15

International cyber incident repository system: Information sharing on a global scale

Joyce, A., Evans, N., Tanzman, E. A., & Israeli, D. (2016) · doi:10.1109/cyconus.2016.7836618 · Cited by 15

Development of a method for estimating security state: Supporting integrated response to cyber-attacks in NPPs

Lee, C., Chae, Y. H., & Seong, P. H. (2021) · Annals of Nuclear Energy · doi:10.1016/j.anucene.2021.108287 · Cited by 15

Cyber-Resilience, Principles, and Practices

Meagher, H., & Dhirani, L. L. (2023) · Internet of things · doi:10.1007/978-3-031-45162-1_4 · Cited by 15

An empirical study on the use of the Generic Security Template for structuring the lessons from information security incidents

He, Y., Johnson, C., Renaud, K., Lu, Y., & Jebriel, S. M. (2014) · doi:10.1109/csit.2014.6805998 · Cited by 15

Cognitive Security for Incident Management Process

Andrade, R., Torres, J., & Cadena-Vela, S. (2019) · Advances in intelligent systems and computing · doi:10.1007/978-3-030-11890-7_59 · Cited by 15

On the Automated Management of Security Incidents in Smart Spaces

Alrimawi, F., Pasquale, L., & Nuseibeh, B. (2019) · IEEE Access · doi:10.1109/access.2019.2934221 · Cited by 15

Data Integrity: Identifying and Protecting Assets Against Ransomware and Other Destructive Events

Cawthra, J., Ekstrom, M., Lusty, L., Sexton, J., & Sweetnam, J. (2020) · doi:10.6028/nist.sp.1800-25 · Cited by 15

Utilisation of Artificial Intelligence and Cybersecurity Capabilities: A Symbiotic Relationship for Enhanced Security and Applicability

Edris, E. K. K. (2025) · Electronics · doi:10.3390/electronics14102057 · Cited by 16

Pre-processing memory dumps to improve similarity score of Windows modules

Martín-Pérez, M., Rodríguez, R. J., & Balzarotti, D. (2020) · Computers & Security · doi:10.1016/j.cose.2020.102119 · Cited by 14

Automotive Cybersecurity

Möller, D. P. F., & Haas, R. E. (2019) · Computer communications and networks · doi:10.1007/978-3-319-73512-2_6 · Cited by 14

Model-Based Incident Response Playbooks

Shaked, A., Cherdantseva, Y., & Burnap, P. (2022) · International Conference on Availability, Reliability and Security (ARES) · doi:10.1145/3538969.3538976 · Cited by 14

Automated computer forensics training in a virtualized environment

Brueckner, S., Guaspari, D., Adelstein, F., & Weeks, J. L. (2008) · Digital Investigation · doi:10.1016/j.diin.2008.05.009 · Cited by 14

An Incident Management Ontology

Mundie, D. A., Ruefle, R., Dorofee, A., Perl, S. J., Mccloud, J. L., & Collins, M. L. (2014) · Cited by 14

“Why Wasn’t I Notified?”: Information Security Incident Reporting Demystified

Koivunen, E. (2012) · Lecture notes in computer science · doi:10.1007/978-3-642-27937-9_5 · Cited by 14

Managing the Security of Information Exchanges

Dempsey, K. L., Pillitteri, V. Y., & Regenscheid, A. (2021) · doi:10.6028/nist.sp.800-47r1 · Cited by 14

From cyber security incident management to cyber security crisis management in the European Union

Ruohonen, J., Rindell, K., & Busetti, S. (2025) · Computers & Security · doi:10.1016/j.cose.2025.104689 · Cited by 13

Understanding and Enabling Tactical Situational Awareness in a Security Operations Center

Mullins, R. S., Nargi, B., & Fouse, A. S. (2020) · Advances in intelligent systems and computing · doi:10.1007/978-3-030-52581-1_10 · Cited by 13

Gap Analysis of ISO/SAE 21434 – Improving the Automotive Cybersecurity Engineering Life Cycle

Grimm, D., Lautenbach, A., Almgren, M., Olovsson, T., & Sax, E. (2023) · IEEE International Conference on Intelligent Transportation Systems (ITSC) · doi:10.1109/itsc57777.2023.10422100 · Cited by 13

Integrating digital forensic practices in cloud incident handling

Rahman, N. H. A., & Choo, K. R. (2015) · Elsevier eBooks · doi:10.1016/b978-0-12-801595-7.00017-3 · Cited by 13

Extending the VERIS Framework to an Incident Handling Ontology

Moreira, G. B., Calegario, V. M., Duarte, J. C., & dos Santos, A. F. P. (2018) · IEEE/WIC/ACM International Conference on Web Intelligence · doi:10.1109/wi.2018.00-55 · Cited by 13

Healthcare Security Incident Response Strategy - A Proactive Incident Response (IR) Procedure

He, Y., Maglaras, L. A., Aliyu, A., & Luo, C. (2022) · Security and Communication Networks · doi:10.1155/2022/2775249 · Cited by 13

Retrofitting the Built Environment

Swan, W., & Brown, P. (2013) · Wiley eBooks · doi:10.1002/9781118273463 · Cited by 13

Characteristics and detectability of Windows auto-start extensibility points in memory forensics

Uroz, D., & Rodríguez, R. J. (2019) · Digital Investigation · doi:10.1016/j.diin.2019.01.026 · Cited by 13

SOC Critical Path: A Defensive Kill Chain Model

Villalón-Huerta, A., Marco-Gisbert, H., & Ripoll, I. (2022) · IEEE Access · doi:10.1109/access.2022.3145029 · Cited by 13

All About Malwares (Malicious Codes).

Zeidanloo, H. R., Tabatabaei, F., Amoli, P. V., & Tajpour, A. (2010) · Security and Management · Cited by 13

An Integral Model to Provide Reactive and Proactive Services in an Academic CSIRT Based on Business Intelligence

Fuertes, W., Reyes, F., Valladares, P., Tapia, F., Toulkeridis, T., & Pérez, E. (2017) · Systems · doi:10.3390/systems5040052 · Cited by 13

Retaliating against cyber-attacks: a decision-taking framework for policy-makers and enforcers of international and cybersecurity law

Leventopoulos, S., Pipyros, K., & Gritzalis, D. A. (2024) · International Cybersecurity Law Review · doi:10.1365/s43439-024-00113-5 · Cited by 12

Towards a Taxonomy of Information Security Management Practices in Organisations

Alshaikh, M., Ahmad, A., Maynard, S. B., & Chang, S. (2014) · Tuwhera (Auckland University of Technology) · Cited by 12

Introducing the Information Security Management System in Cloud Computing Environment

(2015) · Acta Polytechnica Hungarica · doi:10.12700/aph.12.3.2015.3.9 · Cited by 12

Don’t tell them now (or at all) – responsible disclosure of security incidents under NIS Directive and GDPR

Schmitz-Berndt, S., & Schiffner, S. (2021) · International Review of Law Computers & Technology · doi:10.1080/13600869.2021.1885103 · Cited by 12

Recent trends in Social Engineering Scams and Case study of Gift Card ScamPreprint

Chaganti, R., Bhushan, B., Nayyar, A., & Azrour, M. (2021) · arXiv (Cornell University) · doi:10.48550/arxiv.2110.06487 · Cited by 12

Cybersecurity Log Management Planning Guide

Scarfone, K. A., & Souppaya, M. (2023) · doi:10.6028/nist.sp.800-92r1.ipd · Cited by 12

Multi agent based incident management system according to ITIL

Latrache, A., Nfaoui, E. H., & Boumhidi, J. (2015) · International Conference on Intelligent Systems and Computer Vision (ISCV) · doi:10.1109/isacv.2015.7105552 · Cited by 11

As Strong as the Weakest Link: Handling Compromised Components in OpenStack

TaheriMonfared, A., & Jaatun, M. G. (2011) · IEEE International Conference on Cloud Computing Technology and Science · doi:10.1109/cloudcom.2011.34 · Cited by 11

A Framework for SDN Forensic Readiness and Cybersecurity Incident Response

Jiménez, M. B., & Fernández, D. (2022) · IEEE Conference on Network Function Virtualization and Software Defined Networks (NFV-SDN) · doi:10.1109/nfv-sdn56302.2022.9974648 · Cited by 11

CyberEscape Approach to Advancing Hard and Soft Skills in Cybersecurity Education

Pirta-Dreimane, R., Brilingaitė, A., Roponena, E., Parish, K., Grabis, J., Lugo, R. G., & Bonders, M. (2023) · Lecture notes in computer science · doi:10.1007/978-3-031-35017-7_28 · Cited by 11

Smart PV Inverter Cyberattack Detection Using Hardware-in-the-Loop Test Facility

Kaewnukultorn, T., Mora, S. B. S., Broadwater, R., Zhu, D., Tsoutsos, N. G., & Hegedus, S. (2023) · IEEE Access · doi:10.1109/access.2023.3308052 · Cited by 14

Handling compromised components in an IaaS cloud installation

TaheriMonfared, A., & Jaatun, M. G. (2012) · Journal of Cloud Computing Advances Systems and Applications · doi:10.1186/2192-113x-1-16 · Cited by 11

Building an Incident Management Body of Knowledge

Mundie, D. A., & Ruefle, R. (2012) · International Conference on Availability, Reliability and Security (ARES) · doi:10.1109/ares.2012.83 · Cited by 11

Threat awareness for critical infrastructures resilience

Gouglidis, A., Green, B., Busby, J., Rouncefield, M., Hutchison, D., & Schauer, S. (2016) · International Workshop on Resilient Networks Design and Modeling (RNDM) · doi:10.1109/rndm.2016.7608287 · Cited by 11

Digital Evidence Education in Schools of Law

Alva, A., & Endicott-Popovsky, B. E. (2012) · The journal of digital forensics, security and law · doi:10.15394/jdfsl.2012.1120 · Cited by 11

Information security incident management process

Kostina, A., Miloslavskaya, N. G., & Tolstoy, A. I. (2009) · International Conference on Security of Information and Networks (SIN) · doi:10.1145/1626195.1626219 · Cited by 11

Factors Influencing the Adoption of Cloud Incident Handling Strategy: A Preliminary Study in MalaysiaPreprint

Rahman, N. H. A., & Choo, K.-K. R. (2015) · arXiv (Cornell University) · doi:10.48550/arxiv.1505.02908 · Cited by 11

Why securing smart grids is not just a straightforward consultancy exercise

Line, M. B. (2013) · Security and Communication Networks · doi:10.1002/sec.703 · Cited by 10

Cloud Incident Management, Challenges, Research Directions, and Architectural Approach

Munteanu, V. I., Edmonds, A., Bohnert, T. M., & Fortiş, T.-F. (2014) · IEEE/ACM International Conference on Utility and Cloud Computing (UCC) · doi:10.1109/ucc.2014.128 · Cited by 10

Extension of a Methodology for Risk-Aware Business Process Modeling and Simulation Enabling Process-Oriented Incident Handling Support

Tjoa, S., Jakoubi, S., Goluch, G., & Quirchmayr, G. (2008) · International Conference on Advanced Information Networking and Applications (AINA) · doi:10.1109/aina.2008.81 · Cited by 10

Dimensional data model for early alerts of malicious activities in a CSIRT

Valladares, P., Fuertes, W., Tapia, F., Toulkeridis, T., & Pérez, E. (2017) · International Symposium on Performance Evaluation of Computer and Telecommunication Systems · doi:10.23919/spects.2017.8046771 · Cited by 10

Smoke Detector

Roundy, K., Tamersoy, A., Spertus, M., Hart, M., Kats, D., Dell’Amico, M., & Scott, R. (2017) · Annual Computer Security Applications Conference · doi:10.1145/3134600.3134645 · Cited by 10

Procedures for Digital Forensics and Incident Response on Including Data Integrity Constraints on Solid-State Drives (SSD) - A Literature Review

Pallivalappil, A. S., & Jagadeesha, S. N. (2022) · International Journal of Case Studies in Business IT and Education · doi:10.47992/ijcsbe.2581.6942.0167 · Cited by 10

Cyberattack and Cyberwarfare Strategies for Businesses

Asbaş, C., & Tuzlukaya, Ş. E. (2022) · Emerald Group Publishing Limited eBooks · doi:10.1108/978-1-80262-773-220221027 · Cited by 10

Designing and Evaluating an Automatic Forensic Model for Fast Response of Cross-Border E-Commerce Security Incidents

Chen, C.-M., Cai, Z.-X., & Wen, D.-W. (2021) · Journal of Global Information Management · doi:10.4018/jgim.20220301.oa5 · Cited by 9

GENICS: A Framework for Generating Attack Scenarios for Cybersecurity Exercises on Industrial Control Systems

Song, I., Jeon, S., Kim, D., Lee, M. G., & Seo, J. T. (2024) · Applied Sciences · doi:10.3390/app14020768 · Cited by 9

Case Retrieval for Network Security Emergency Response Based on Description Logic

Jiang, F., Gu, T., Chang, L., & Xu, Z. (2014) · Lecture notes in computer science · doi:10.1007/978-3-662-44980-6_32 · Cited by 9

Cyber Attack! Is a Counter Attack Warranted?

McLaughlin, K. L. (2011) · Information Security Journal A Global Perspective · doi:10.1080/19393555.2010.544705 · Cited by 9

Forewarned is Forearmed: Indicators for Evaluating Information Security Incident Management

Bernsmed, K., & Tøndel, I. A. (2013) · International Conference on IT Security Incident Management and IT Forensics (IMF) · doi:10.1109/imf.2013.14 · Cited by 9

Cloud Computing Understanding Risk, Threats, Vulnerability and Controls: A Survey

Potey, M. M., Dhote, C. A., & Sharma, D. H. (2013) · International Journal of Computer Applications · doi:10.5120/11373-6641 · Cited by 9

On Aggregation and Prediction of Cybersecurity Incident Reports

Carriegos, M. V., Castañeda, Á. L. M., Trobajo, M. T., & Zaballa, D. A. D. (2021) · IEEE Access · doi:10.1109/access.2021.3097834 · Cited by 9

Mitigations for Security Vulnerabilities Found in Control System Networks

Nelson, T. D. (2006) · University of North Texas Digital Library (University of North Texas) · Cited by 9

Network Intrusion Response using Deep Reinforcement Learning in an Aircraft IT-OT Scenario

Reaney, M., McLaughlin, K., & Grant, J. (2024) · International Conference on Availability, Reliability and Security (ARES) · doi:10.1145/3664476.3670917 · Cited by 8

Kecerdasan Buatan untuk Security Orchestration, Automation and Response: Tinjauan Cakupan

Venny Gustina, D. M., & Ananda, A. (2024) · Jurnal Komputer Terapan · doi:10.35143/jkt.v10i1.6247 · Cited by 8

The impact of cyber threat intelligence (CTI) on employee behavior and skills and the implications for organizational cyber resilience

Avrahami, Z., & Zwilling, M. (2025) · International Journal of Information Security · doi:10.1007/s10207-025-01096-y · Cited by 8

A structured methodology for deploying log management in WANs

Anastopoulos, V., & Katsikas, S. K. (2017) · Journal of Information Security and Applications · doi:10.1016/j.jisa.2017.02.004 · Cited by 8

Development and evaluation of information elements for simplified cyber-incident reports

Lif, P., Sommestad, T., & Granåsen, D. (2018) · International Conference on Cyber Situational Awareness, Data Analytics and Assessment (CyberSA) · doi:10.1109/cybersa.2018.8551402 · Cited by 8

Sharing is Caring: Collaborative Analysis and Real-Time Enquiry for Security Analytics

Webster, G. D., Harris, R. L., Hanif, Z. D., Hembree, B. A., Großklags, J., & Eckert, C. M. (2018) · IEEE International Conference on Internet of Things (iThings) and IEEE Green Computing and Communications (GreenCom) and IEEE Cyber, Physical and Social Computing (CPSCom) and IEEE Smart Data (SmartData) · doi:10.1109/cybermatics_2018.2018.00240 · Cited by 8

On the Assessment of Completeness and Timeliness of Actionable Cyber Threat Intelligence Artefacts

Yücel, Ç., Chalkias, I., Mallis, D., Karagiannis, E., Çetinkaya, D., & Katos, V. (2020) · Communications in computer and information science · doi:10.1007/978-3-030-59000-0_5 · Cited by 8

A Study of Information Security Practice in a Critical Infrastructure Application

Jaatun, M. G., Albrechtsen, E., Line, M. B., Johnsen, S. O., Wærø, I., Longva, O. H., & Tøndel, I. A. (2008) · Lecture notes in computer science · doi:10.1007/978-3-540-69295-9_42 · Cited by 8

A Structured Approach to Incident Response Management in the Oil and Gas Industry

Line, M. B., Albrechtsen, E., Jaatun, M. G., Tøndel, I. A., Johnsen, S. O., Longva, O. H., & Wærø, I. (2009) · Lecture notes in computer science · doi:10.1007/978-3-642-03552-4_21 · Cited by 8

Architectures for Cyber-Security Incident Reporting in Safety-Critical Systems

Johnson, C. (2014) · Lecture notes in social networks · doi:10.1007/978-3-319-08819-8_7 · Cited by 8

Analysis avoidance techniques of malicious software

Brand, M. (2010) · Australasian Journal of Paramedicine · Cited by 8

Predictive Analytics and Cybersecurity

Habeeb, M. S. (2024) · Wiley eBooks · doi:10.1002/9781394227990.ch8 · Cited by 8

Guide to Malware Incident Prevention and Handling for Desktops and Laptops

Souppaya, M., & Scarfone, K. A. (2013) · doi:10.6028/nist.sp.800-83r1 · Cited by 89

An introduction to information security

Nieles, M., Dempsey, K., & Pillitteri, V. Y. (2017) · doi:10.6028/nist.sp.800-12r1 · Cited by 164

Volume I :

Stine, K., Kissel, R., Barker, W. C., Fahlsing, J., & Gulick, J. (2008) · doi:10.6028/nist.sp.800-60v1r1 · Cited by 84

Security and Privacy Controls for Federal Information Systems and Organizations

Joint Task Force Transformation Initiative (2013) · doi:10.6028/nist.sp.800-53r4 · Cited by 470

Security and Privacy Controls for Information Systems and Organizations

Joint Task Force Interagency Working Group (2020) · doi:10.6028/nist.sp.800-53r5 · Cited by 419