Which of the following individuals is responsible for configuration management and control task? Response:

The authorizing official makes the risk-based decision to authorize an information system to operate, not directly manage daily configuration tasks.

The information system owner holds the primary responsibility for the overall development, procurement, integration, modification, operation, and maintenance of an information system. This includes ensuring that the system's configuration is managed and controlled to maintain security, compliance, and operational integrity.

The chief information officer is a senior executive responsible for the organization's overarching IT strategy and governance, a higher-level function than direct configuration management.

The common control provider is responsible for implementing and managing shared security controls that are inherited by multiple systems, not the specific configuration of individual systems.