ISM-0728 Removed History Priority should 2010 The CISO should provide strategic-level information security guidance for ICT projects and operations.