National Institute of Standards and Technology (NIST), Recommended Security Controls for Federal Information Systems and Organizations. NIST Special Publication , 2003.