contribution of all parties. 24.4 definition of information security assurance system: