Who has the responsibility to track corrective actions to their completion keeping the approving authority informed with periodic updates as directed? Response:

“ISSSE” (Information System Security Systems Engineer) is not a standard role with this specific tracking responsibility; engineers typically focus on technical implementation.

The Information System Owner (ISO) is typically responsible for the overall procurement, development, integration, modification, operation, and maintenance of a specific information system. This includes ensuring that corrective actions for identified deficiencies are tracked, implemented, and reported to the authorizing official or approving authority.

“ISSO” (Information System Security Officer) generally assists the ISO in ensuring the security of the system, including compliance and coordination, but the ultimate responsibility for tracking and reporting often rests with the ISO.

“SISO” (Senior Information Security Officer) is not a commonly defined role in NIST or similar frameworks for this specific task; a CISO or SAOIS has broader program responsibility, not system-specific action tracking.