Security assessment provider requirements and customer responsibilities : building a security assessment credentialing program for federal information systems : initial public draft / - Johnson, Arnold. (Computer Security Division, Information Technology Laboratory, National Institute of Standards and Technology, U.S. Dept. of Commerce,, 2007)