ISM-0600 Removed History 2008 Agencies should seek to reduce risks resulting from the security risk assessment.