You work as a security engineer for BlueWell Inc. According to you, which of the following statements determines the main focus of the ISSE process?

Question

Options

• ADesign information systems that will meet the certification and accreditation documentation.
• BIdentify the information protection needs.
• CEnsure information systems are designed and developed with functional relevance.
• DInstruct systems engineers on availability, integrity, and confidentiality.

• A
  3% (1)
• B
  94% (30)
• D
  3% (1)

Explanation

Option B is correct because the ISSE (Information Systems Security Engineering) process begins with - and centers on - identifying what information needs to be protected and why. Without first understanding protection needs, no meaningful security engineering can follow; it is the foundational input that drives everything else in the process.

Why the distractors are wrong:

• A is wrong because meeting C&A documentation is an outcome or compliance concern, not the primary focus of ISSE itself.
• C is wrong because functional relevance is a systems engineering concern broadly, not the security-specific focus of ISSE.
• D is wrong because instructing engineers on the CIA triad is a training activity, not what the ISSE process is designed to accomplish.

Memory tip: Think of ISSE as starting with a question - "What are we protecting?" - before answering "How do we protect it?" The word "Identify" in option B mirrors the first phase of the ISSE model, making it the logical anchor for the entire process.

No community discussion yet for this question.