CISSP-ISSEP: Information Systems Security Engineering Professional

Question

Which of the following individuals are members of senior management and responsible for authorizing individual systems, approving enterprise solutions, setting security policies, providing funding, and maintaining an understanding of risk at every level?

Each correct answer represents a complete solution. Choose all that apply.

Choose three

Explanation

The Chief Information Officer is responsible for developing and maintaining security policies, allocating security resources, and ensuring systems are authorized to operate. The Senior Information Security Officer carries out the CIO’s security responsibilities and serves as the primary liaison with authorizing officials. The Authorizing Official is a senior official who formally assumes responsibility for operating a system at an acceptable level of risk. An AO Designated Representative can conduct delegated authorization activities but cannot accept system risk.

Learn more

NIST SP 800-12 Rev. 1 (Draft), An Introduction to Information Security

CISSP-ISSEP: Information Systems Security Engineering Professional

AstroTutor

Notes

Readiness

QuestionQ198

Community Discussion