The Information System Security Officer (ISSO) and Information System Security Engineer (ISSE) play the role of a supporter and advisor, respectively. Which of the following statements are true about

An ISSE's primary role is to provide expert technical guidance on the integration of security into systems and software development, which includes advising on the security impacts of design decisions and proposed system changes. This aligns with the ISSE's role as an advisor on system modifications. An ISSO manages the security of the information system that is slated for Certification & Accreditation (C&A) because the ISSO is responsible for ensuring the system's security posture meets organizational requirements and assists in the formal process of security authorization.

An ISSO's core responsibility includes managing and overseeing the security of an information system throughout its lifecycle, including preparation for and execution of the Certification and Accreditation (C&A) or Authorization to Operate (ATO) processes. This involves ensuring security controls are implemented and maintained, aligning with their role as a supporter and manager of the system's security posture.

An ISSO's role is typically focused on security management, oversight, and compliance, not directly participating in the technical development activities required to implement system changes. That is more often the role of an ISSE or development team.

While an ISSE provides technical input for system design to support continuous monitoring, the direct 'advice on the continuous monitoring' (i.e., the ongoing process and findings) is typically within the purview of the ISSO or dedicated continuous monitoring teams who manage the operational security posture.