Q16. Which of the following sources did you (or will you) use to establish standards or guidance?

  Number
of states
Total
number
of states
a. National or international organization (e.g., National Institute of Standards and Technology; Information Systems Audit and Control Association) 20 49
b. State officials 43 49
c. Local jurisdiction officials 28 49
d. Consultant or vendor 31 49
e. Other source (describe below) 2 49
f. Don't Know 2 49