Automatic data processing risk assessment
Susan K. Reed · 1977
The method described here is based in part on the work of several members of Federal Information Processing Standards Task Group 15, Computer Systems Security.The National Bureau of Standards is grateful to Robert H. Courtney, Jr., of the IBM Corporation for his kind permission to adapt his work to the needs of the Federal Govern- ment and for his continuing assistance.Also from Task Group 15, the work of T. Q. Stevenson of the Department of Agriculture and Ralph E