Utilizing reusable patterns based on NIST 800-53 controls as foundational elements for constructing security assurance arguments.