process ▁ ▁Plan ▁ ▁The ▁Plan ▁sub - process ▁contains ▁activities ▁that ▁in ▁co operation ▁with ▁service ▁level ▁management ▁lead ▁to ▁the ▁( information ) ▁Security ▁section ▁in ▁the ▁S LA . ▁Furthermore , ▁the ▁Plan ▁sub - process ▁contains ▁activities ▁that ▁are ▁related ▁to ▁the ▁under pin ning ▁contract s ▁which ▁are ▁specific ▁for ▁( information ) ▁security . ▁ ▁In ▁the ▁Plan ▁sub - process ▁the ▁goals ▁form ulated ▁in ▁the ▁S LA ▁are ▁specified ▁in ▁the ▁form ▁of ▁oper ational ▁level ▁agre ements ▁( O LA ). ▁These ▁O LA ' s ▁can ▁be ▁defined ▁as ▁security ▁plans ▁for ▁a ▁specific ▁internal ▁organization ▁entity ▁of ▁the ▁service ▁provider . ▁ ▁Besides ▁the ▁input ▁of ▁the ▁S LA , ▁the ▁Plan ▁sub - process ▁also ▁works ▁with ▁the ▁policy ▁statements ▁of ▁the ▁service ▁provider ▁itself . ▁As ▁said ▁earlier ▁these ▁policy ▁statements ▁are ▁defined ▁in ▁the ▁control ▁sub - process . ▁ ▁The ▁oper ational ▁level ▁agre ements ▁for ▁information ▁security ▁are ▁set ▁up ▁and ▁implemented ▁based ▁on ▁the ▁IT IL ▁process . ▁This ▁requires ▁co operation ▁with ▁other ▁IT IL ▁processes . ▁For ▁example , ▁if ▁security ▁management ▁wishes ▁to ▁change ▁the ▁IT ▁infrastr ucture ▁in ▁order ▁to ▁enh ance ▁security , ▁these ▁changes ▁will ▁be ▁done ▁through ▁the ▁change ▁management ▁process . ▁Security ▁management ▁del ivers ▁the ▁input ▁( Request ▁for ▁change ) ▁for ▁this ▁change . ▁The ▁Change ▁Manager ▁is ▁responsible ▁for ▁the ▁change ▁management ▁process . ▁ ▁Plan ▁consists ▁of ▁a ▁combination ▁of ▁un ordered ▁and ▁ordered