<Li> Owners of business applications </Li> <Li> Individuals in charge of business processes that are dependent on applications </Li> <Li> Technical staff, such as members of an application support team . </Li> <Ul> <Li> Type (including transaction processing, process control, funds transfer, customer service, and workstation applications) </Li> <Li> Size (e.g. applications supporting thousands of users or just a few) </Li> </Ul>

Isf standard of good practice for information security 2016