ISM-0470 Removed History 2008 When personal information is sent to a private citizen or business via electronic means, agencies must ensure that prior to sending the information they document any risks that could be associated with the communication.