Your organization is undergoing a ISA-CMM Assessment and you are assigned as the program manager. One part of that assessment deals with how to dispose of media, the proper configuration of security settings, and similar sorts of security protocols. Explain what a 'process description' is, identify how you would assess whether or not a process is repeatable and formally implemented, and describe how such processes would be assessed as part of the ISA-CMM. Provide at least two peer reviewed sources to substantiate your posting.