NIST Special Publication 800-53A Revision 4:

Assessing Security and Privacy
Controls in Federal Information
Systems and Organizations