When and how each organization accesses CISM is determined by: