194 “Automated Security Self-Evaluation Tool” [web page] (Gaithersburg, MD: NIST Computer Security
Division Computer Security Resource Center).
195 “CRAMM” [web page] (Walton-on-Thames, Surrey, UK: Siemens Insight Consulting).
196 Donald L. Buckshaw (Cyber Defense Agency), et al., “Mission Oriented Risk and Design Analysis of