Management of Information Security 4th Edition by Michael Whitman ,Herbert Mattord

Exercise 1

Iris sighed as she completed her initial review of her staff's checklist results. She pulled out a notepad and began outlining the projects she foresaw, based on the shortcomings identified via the checklist. She had decided to use the NIST approach for her security management planning and was fortunate to have found a useful model for an InfoSec review of her program.
Based on your understanding of the chapter, from which NIST Special Publication did Iris draw her initial checklist