What does ISSP/SCA stand for?

• A. Information System Security Professional / Security Control Assessor
• B. Information System Security Program / System Certification Auditor
• C. Information Security Specialist / System Compliance Analyst
• D. Information System Safety Professional / Security Compliance Auditor

Answer: (A)

ISSP/SCA refers to two roles: Information System Security Professional and Security Control Assessor. The Information System Security Professional is the security expert who understands and oversees the implementation and management of security controls. The Security Control Assessor is the evaluator who tests and validates those controls to ensure they meet required standards and effectively reduce risk. Together, these titles describe the two complementary functions in security oversight: implementing controls and assessing their effectiveness. The other options use terms that aren’t standard in this context, so they don’t match the established meaning of ISSP/SCA.