ISM-0880 Removed History Priority recommended 2010 It is recommended that, when the agency head delegates their authority, the delegate be the CISO.