Source: https://csrc.nist.gov/CSRC/media/Presentations/FISMA-and-OPM-Awareness-and-Training-Requirements/images-media/fissea2007_fisma-omb-requirements-nist-guidelines_wilson.pdf