ISM-0654 Removed History 2008 Agencies should ensure that data imports are either: a. performed in accordance with processes and/or procedures approved by the accreditation authority or b. individually approved by the information technology security adviser.