graylady:
No computer system left behind: a review of the federal government's D+ information security grade
graylady:
No computer system left behind: a review of the 2005 federal computer security scorecards