Security Controls for Computer Systems, commonly called the Ware report,[1][2] is a 1970 text by Willis Ware that was foundational in the field of computer security.
[3] A defense contractor in St. Louis, Missouri, had bought an IBM mainframe computer, which it was using for classified work on a fighter aircraft.
[4] To provide additional income, the contractor asked the Department of Defense (DoD) for permission to sell computer time on the mainframe to local businesses via remote terminals, while the classified work continued.
The DoD's Advanced Research Projects Agency (ARPA) asked Ware - a RAND employee - to chair a committee to examine and report on the feasibility of security controls for computer systems.
[4][5] The committee's report was a classified document given in January 1970 to the Defense Science Board (DSB), which had taken over the project from ARPA.