Which of the following professionals plays the role of a monitor and takes part in the organization's configuration management process?

The correct answer is D. Common Control Provider. The Common Control Provider is responsible for implementing, managing, and monitoring security controls that are inherited by multiple information systems across an organization. As part of this role, the Common Control Provider participates in the organization's configuration ma

Compliance Maintenance

Question

Options

ASenior Agency Information Security Officer
BAuthorizing Official
CChief Information Officer
DCommon Control Provider

How the community answered

(64 responses)

A
3% (2)
B
2% (1)
C
5% (3)
D
91% (58)

Explanation

The Common Control Provider is responsible for implementing, managing, and monitoring security controls that are inherited by multiple information systems across an organization. As part of this role, the Common Control Provider participates in the organization's configuration management process to ensure that inherited controls remain effective and properly maintained. The Senior Agency Information Security Officer (A) focuses on policy and oversight; the Authorizing Official (B) grants authorization to operate; the Chief Information Officer (C) oversees IT strategy. Only the Common Control Provider has the direct monitoring and configuration management participation role described.

Topics

#Common Control Provider#Roles and Responsibilities#Configuration Management#Monitoring

Community Discussion

No community discussion yet for this question.

Full CAP Practice