u Automated Security Self-Evaluation Tool (ASSET)—[194] NIST’s ASSET
provides automated self-assessments against its own established criteria
for security controls. ASSET is, in essence, an automated version of the
questionnaire in NIST SP 800-26, Guide for Information Security Program