When a facility has multiple authorized information systems or the program is technically complex, who is assigned to oversee the IS program at the facility?

• A. Information System Security Officer (ISSO)
• B. Information System Security Manager (ISSM)
• C. Inside Director
• D. Insider Threat Analyst

Answer: (A)

When a facility operates multiple authorized information systems or the program is technically complex, a single point of security accountability is needed to keep everything aligned. The Information System Security Officer is the person assigned to oversee the security of the information system(s) at the facility. This role is responsible for ensuring that security controls are properly implemented and maintained, coordinating security requirements across all systems, guiding risk management and continuous monitoring, and serving as the main security liaison to system owners and the authorizing official. By having one dedicated ISSO oversee the entire IS program at the facility, security stayed coordinated, consistent, and auditable across the diverse systems. The other roles either focus on specific threat areas or on higher-level program management that isn’t the day-to-day security lead for the facility’s multiple systems.