CISSP-ISSEP: Information Systems Security Engineering Professional

An Information Protection Policy (IPP) captures information-protection needs, including identified threats and the security services and controls required to respond to them. The Information Management Model (IMM) instead describes information-management needs, while CONOPS and the System Security Context support later operational and system-definition work.