Operating Procedures for the Assessment of Information and Communication Security of Information and Communication Systems by Securities Firms CH