The Information System Security Officer (ISSO) and Information System Security Engineer (ISSE) play the role of a supporter and advisor, respectively. Which of the following statements are true…

The correct answer is A. An ISSE provides advice on the impacts of system changes. C. An ISSO manages the security of the information system that is slated for Certification & E. An ISSE provides advice on the continuous monitoring of the information system. The ISSE (Information System Security Engineer) acts as an advisor: they provide advice on the impacts of system changes (A) and advice on continuous monitoring of the information system (E). The ISSO (Information System Security Officer) acts as a supporter: they manage the…

Security and Privacy Governance, Risk Management, and Compliance Program

Question

The Information System Security Officer (ISSO) and Information System Security Engineer (ISSE) play the role of a supporter and advisor, respectively. Which of the following statements are true about ISSO and ISSE? Each correct answer represents a complete solution. Choose all that apply.

Options

AAn ISSE provides advice on the impacts of system changes.
BAn ISSE manages the security of the information system that is slated for Certification &
CAn ISSO manages the security of the information system that is slated for Certification &
DAn ISSO takes part in the development activities that are required to implement system
EAn ISSE provides advice on the continuous monitoring of the information system.

How the community answered

(41 responses)

A
88% (36)
B
7% (3)
D
5% (2)

Explanation

The ISSE (Information System Security Engineer) acts as an advisor: they provide advice on the impacts of system changes (A) and advice on continuous monitoring of the information system (E). The ISSO (Information System Security Officer) acts as a supporter: they manage the security of the information system slated for C&A (C). Choice B is incorrect because it attributes security management to the ISSE - that is the ISSO's role. Choice D is incorrect because participating in development activities to implement system changes is an ISSE engineering function, not an ISSO function.

Topics

#ISSO responsibilities#ISSE responsibilities#Certification and Accreditation (C&A)#Continuous monitoring

Community Discussion

No community discussion yet for this question.

Full CAP Practice