Security, Privacy, and Compliance in the Cloud White Paper

See also  CJIS Security Policy Working Group - Assessment Authorization and Monitoring (CA)