GAO/AIMD-98-68 Information Security Management Page 11
The GAO/AIMD standards for Information Security Management is a long document.