Guide for security-focused configuration management of information systems / - Johnson, Arnold. (U.S. Dept. of Commerce, National Institute of Standards and Technology,, 2011)