Information protection involves both system security and information security.
Selected standards must support the ability to provide both system and information security. Applications and computers from different suppliers will have the capability to work together on a network and to connect and share data and processes as appropriate. The model that the standards in this document follow is one that allows end systems to attach to any point on an internetwork. Implementation cost and market acceptance of the standard or guidance is also a selection factor. Market acceptance is judged more on market momentum than on current market share.