Help on how to become an IPSP or ISO

Our business falls under higher risk category and we are considering becoming an IPSP or ISO. What is the difference between the two? Could you please forward me some links?