“NIST documents are a feature that seems like a bug” Experts have the assessment procedures in their brain but it is written down”