Which of the following individuals is responsible for preparing and submitting security status reports to the organizations? Response:

The correct answer is C. Common Control Provider. The Senior Agency Information Security Officer (SAISO) is typically responsible for overseeing the information security program, which includes preparing and submitting security status reports.

Security and Privacy Governance, Risk Management, and Compliance Program

Question

Options

AChief Information Officer
BSenior Agency Information Security Officer
CCommon Control Provider
DAuthorizing Official

How the community answered

(39 responses)

A
5% (2)
B
3% (1)
C
90% (35)
D
3% (1)

Why each option

The Senior Agency Information Security Officer (SAISO) is typically responsible for overseeing the information security program, which includes preparing and submitting security status reports.

AChief Information Officer

The Chief Information Officer (CIO) generally oversees all IT operations, but the SAISO/CISO has specific responsibilities for security reporting.

BSenior Agency Information Security Officer

CCommon Control ProviderCorrect

DAuthorizing Official

The Authorizing Official (AO) makes the final decision to authorize a system's operation, relying on reports, but does not prepare them.

Concept tested: Role of Senior Agency Information Security Officer

Source: https://csrc.nist.gov/glossary/term/chief-information-security-officer

Topics

#Common Control Provider#Roles and Responsibilities#Security Reporting#NIST RMF

Community Discussion

No community discussion yet for this question.

Full CGRC Practice