CGRC · Question #77
Which organization is responsible for procurement, development, integration, modification, operation, maintenance, and disposal of an Information System? Response:
The correct answer is A. Information System Owner. The Information System Owner is broadly responsible for the entire lifecycle of an information system, encompassing its procurement, development, operation, maintenance, and eventual disposal. This role ensures the system meets its mission while adhering to security policies…
Question
Which organization is responsible for procurement, development, integration, modification, operation, maintenance, and disposal of an Information System? Response:
Options
- AInformation System Owner
- BInformation system security engineer (ISSE)
- CChief Information Officer (CIO)
- DInformation security architect
How the community answered
(44 responses)- A93% (41)
- B2% (1)
- D5% (2)
Why each option
The Information System Owner is broadly responsible for the entire lifecycle of an information system, encompassing its procurement, development, operation, maintenance, and eventual disposal. This role ensures the system meets its mission while adhering to security policies throughout its existence.
The Information System Owner has cradle-to-grave responsibility for an information system, covering its entire lifecycle from initial procurement and development through to operation, maintenance, and ultimate disposal. This comprehensive oversight ensures accountability for the system's functionality and security.
An Information system security engineer (ISSE) focuses on the security aspects of system design and implementation, but not the overall lifecycle management.
A Chief Information Officer (CIO) has broader organizational IT responsibilities, but the Information System Owner is specifically accountable for a given system.
An Information security architect designs security solutions and frameworks, but does not typically manage the full lifecycle from procurement to disposal.
Concept tested: Information System Owner lifecycle responsibilities
Source: https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-37r2.pdf
Topics
Community Discussion
No community discussion yet for this question.