Ben Ray Luján actually said...
The industry should develop a service catalog (or service catalogs) for various categories of information, using industry standard language and metrics.
Context
Lujan emphasizes the need for a standardized service catalog for information security.
09/20/2011