CISSP-ISSEP: Information Systems Security Engineering Professional

An Information Protection Policy (IPP) identifies threats to information management and the security services and controls needed to address them. It therefore directly supports classification of the required security functionality.