ISM-0018 Removed History 2008 Information relating to the system-specific roles and responsibilities of ITSAs should be included in the ICT security documentation produced for each system.