ISM-0703 Removed History 2008 Agencies should provide an agency accredited device for remote access in circumstances in which it is assessed that the remote worker will be accessing, or could access, classified information.