Once upon a time I wrote white papers for the Army dealing with Computer Security. I did my own research, writing, and forwarded it to Dept of the Army. It was adopted as a model for research labs to follow in establishment of their own security profiles.