Who is primarily responsible for the development of system-specific procedures? Response:

The system owner holds the primary responsibility for the development, implementation, and maintenance of the system, including its operational policies and system-specific procedures. They understand the system's mission, business processes, and the specific controls needed for its secure and effective operation.

The Information Systems Security Officer (ISSO) advises on security matters and helps implement controls, but the system owner ultimately owns the system's procedures.

The system architect designs the system, but the owner is responsible for the ongoing operational procedures.

The system administrator implements and maintains the system according to procedures, but does not typically develop them as a primary responsibility.