ISM-0379 Removed History 2008 All server and workstation security objectives and mechanisms should be documented in the relevant system security plan.