A catalog of security and privacy controls for federal information systems, providing comprehensive security requirements.