Which of the following C&A professionals plays the role of an advisor?

The correct answer is A. Information System Security Engineer (ISSE). The ISSE (Information System Security Engineer) serves in an advisory role throughout the C&A process. The ISSE provides technical security engineering expertise and guidance to the system owner and other stakeholders, but does not have decision-making authority. In contrast…

Security and Privacy Governance, Risk Management, and Compliance Program

Question

Options

AInformation System Security Engineer (ISSE)
BChief Information Officer (CIO)
CAuthorizing Official
DInformation Owner

How the community answered

(45 responses)

A
89% (40)
B
7% (3)
C
2% (1)
D
2% (1)

Explanation

The ISSE (Information System Security Engineer) serves in an advisory role throughout the C&A process. The ISSE provides technical security engineering expertise and guidance to the system owner and other stakeholders, but does not have decision-making authority. In contrast, the Authorizing Official (formerly DAA) makes accreditation decisions, the CIO has organizational IT oversight authority, and the Information Owner is responsible for the data itself.

Topics

#C&A Roles#ISSE#Security Authorization#Professional Responsibilities

Community Discussion

No community discussion yet for this question.

Full CAP Practice