Which of the following individuals is responsible for configuration management and control task?

The correct answer is B. Information system owner. The Information System Owner (ISO) has day-to-day accountability for the operation and maintenance of the information system, which includes overseeing configuration management and control. This role ensures that the system baseline is documented, changes are tracked, and…

Compliance Maintenance

Question

Options

AAuthorizing official
BInformation system owner
CChief information officer
DCommon control provider

How the community answered

(63 responses)

A
3% (2)
B
95% (60)
C
2% (1)

Explanation

The Information System Owner (ISO) has day-to-day accountability for the operation and maintenance of the information system, which includes overseeing configuration management and control. This role ensures that the system baseline is documented, changes are tracked, and configurations comply with security policies. The Authorizing Official grants the authorization to operate. The Chief Information Officer sets policy at an organizational level. The Common Control Provider manages inherited controls, not configuration management of a specific system.

Topics

#Configuration management#Information system owner#Roles and responsibilities#RMF roles

Community Discussion

No community discussion yet for this question.

Full CAP Practice