What should be the first component of an ISSP when it is presented why what should be the second major component why?