The Information System Security Officer (ISSO) and Information System Security Engineer (ISSE) play the role of a supporter and advisor, respectively. Which of the following statements are true about

An ISSE provides engineering advice and guidance for system security; they do not typically hold the management responsibility for the overall security of an information system undergoing C&A, which falls to the ISSO or System Owner.

An ISSE (Information System Security Engineer) provides expert technical advice on how to secure information systems throughout their lifecycle, which includes recommendations and guidance on continuous monitoring strategies and implementation.

An ISSO (Information System Security Officer) is typically responsible for managing the overall security posture of an information system, including its preparation for and maintenance through the Certification & Accreditation (C&A), now commonly Risk Management Framework (RMF), process.

An ISSE, as a security engineering expert, is well-suited to provide technical advice and analysis on the security impacts of proposed system changes, ensuring that modifications do not introduce new vulnerabilities or compromise existing controls.

While an ISSO works closely with development teams, their primary role is security oversight and management, not direct participation in the technical development activities required to implement system changes.