The Information System Security Officer (ISSO) and Information System Security Engineer (ISSE) play the role of a supporter and advisor, respectively. Which of the following statements are true…

Question

Options

• AAn ISSE manages the security of the information system that is slated for Certification &
• BAn ISSO takes part in the development activities that are required to implement system ch
• CAn ISSE provides advice on the continuous monitoring of the information system.
• DAn ISSE provides advice on the impacts of system changes.
• EAn ISSO manages the security of the information system that is slated for Certification &

• A
  5% (1)
• B
  5% (1)
• C
  90% (18)

Explanation

In the NIST/RMF framework: The ISSO (supporter role) is responsible for managing the day-to-day security of an information system, including overseeing its security posture through the C&A/authorization process-making E correct. The ISSE (advisor role) provides security engineering guidance and advice throughout the system lifecycle-this includes advising on continuous monitoring (C) and advising on the security impacts of proposed system changes (D). Option A is incorrect because managing the IS security is the ISSO's role, not the ISSE's. Option B is incorrect because it is the ISSE, not the ISSO, who participates in development and engineering activities to implement security controls.

No community discussion yet for this question.