ISM-0010 Removed History 2008 Agencies must consider the high-level process of ICT security during the analysis and design of a system.