NISTIR 5424: A Study of Federal Agency Needs for Information Technology Security (PB94-193653) (May 1994) (not available online).