Intelligence Community Directive 503

Citation
"Intelligence Community Information Technology Systems Security Risk Management, Certification and Accreditation" (Intelligence Community Directive 503) (Sept. 15, 2008) (full-text).