ISM-0104 Removed History 2008 Agencies should clearly define the roles and responsibilities for maintaining ICT security and provide the resources needed to successfully complete such tasks.