ISM-0036 Removed History 2008 Agencies should, by default, classify ICT security documentation as a minimum of SECURITY-IN-CONFIDENCE.