The IT Law Wiki

Warning: You are not logged in. Your IP address will be publicly visible if you make any edits. If you log in or create an account, your edits will be attributed to your username, along with other benefits.

The edit can be undone. Please check the comparison below to verify that this is what you want to do, and then save the changes below to finish undoing the edit.

Latest revision Your text
Line 1: Line 1:
== Definitions ==
+
== Definition ==
   
An '''Information Security Officer''' is
+
An '''Information Security Officer''' is the
   
{{Quote|[the o]fficial responsible for carrying out the [[Chief Information Officer]] responsibilities under [[FISMA]] and serving as the [[Chief Information Officer]]'s primary liaison to the agency's authorizing officials, [[information system]] owners, and [[information system]] [[security officer]]s.<ref>44 U.S.C. §3544.</ref>}}
+
{{Quote|[o]fficial responsible for carrying out the [[Chief Information Officer]] responsibilities under [[FISMA]] and serving as the [[Chief Information Officer]]'s primary liaison to the agency's authorizing officials, [[information system]] owners, and [[information system]] [[security officer]]s.<ref>44 U.S.C. §3544.</ref>}}
 
{{Quote|[t]ypically a member of an organization who has the responsibility to establish and maintain [[information security policy]], [[assess]]es [[threat]]s and [[vulnerabilities]], performs [[Risk assessment|risk]] and [[control assessment]]s, oversees the governance of [[security]] operations, and establishes [[information security]] training and awareness programs. The ISO also usually interfaces with [[[security]] operations to manage [[implementation]] details and with [[auditor]]s to [[verify]] [[compliance]] to established [[policies]].<ref>[[Criminal Justice Information Services Security Policy]], Glossary, at A-6.</ref>}}
 
   
 
== References ==
 
== References ==

Please note that all contributions to the The IT Law Wiki are considered to be released under the CC-BY-SA

Cancel Editing help (opens in new window)

Template used on this page: