Co, Marianne Swanson &. Security Metrics Guide for Information Technology Systems. Gaithersburg: National Institute of Standards and Technology, 2003.