Security Manual itself is not maintained as such, however this criteria is interpreted to apply to Security Policy not the Security Manual.