Back to Security. I'm going to sidestep Linda's challenge to continue the ISO thread and refocus on security. I have documents to share that cover two important topics:

1. Access Controls
• Business Process Framework for Role-Based Access Controls
• X.509 Role-Based Privileges
• Role-Based Object Model Architecture
2. Assurance and Metrics
• Scorecard for Authentication Technologies
• Information Assurance Metrics
• Systems Security Engineering Capability Maturity Model