ISM-0436 Removed History 2008 All system users accessing a system operating in system high mode must have a need-to-know for some of the information processed by the system, with need-to-know access control enforced by the system.