CISSP-ISSEP: Information Systems Security Engineering Professional

An Information Management Plan documents the mission need, the organization’s information-management approach, and the Information Protection Policy (IPP). Those outputs establish the basis for defining the information system and its later security requirements; system security requirements are therefore not themselves a core IMP task.