Author: National Advisory Committee on Computer Security. Computing Practice Sub-Committee.