Information Systems Security Manager (ISSM) - Marine Corps ...

More documents

Recommendations

Info

NAVSO P-5239-04SEPTEMBER 1995· Security management· Risk management program· Accreditation· Administrative functions· Training and awareness· Physical security· Auditing· Incident and violations reporting· Security configuration management· Contingency planning· Security documentation.2
NAVSO P-5239-04SEPTEMBER 19952.0 INFORMATION SYSTEMS SECURITY MANAGER ROLEThe ISSM functions as the activity’s focal point and principal advisor for INFOSECmatters on behalf of the Designated Approving Authority ( DAA). The ISSM reports to theDAA and implements the overall INFOSEC program approved by the DAA. An activity mayhave multiple ISSMs. For example, an activity having several subordinate Command’s mayhave an ISSM assigned for each subordinate Command.The ISSM RoleIn executing the responsibilities of the position, the ISSM:· Ensures that INFOSEC program requirements are met· Implements the risk management program required bythe DON· Verifies that appropriate security tests are conducted anddocumented· Ensures that the accreditation support documentation isdeveloped and maintained· Provides the DAA with accreditation packages forsystems under the DAA’s purview to verify that each ISmeets security specifications for an acceptable level ofrisk· Reviews the accreditation plan and reaccreditationactivities· Ensures that proposed system changes are reviewed, andthat implemented system modifications do not adverselyimpact the security of the system· Ensures contingency plans are developed and tested· Ensures that IS users’ activities are monitored to verifycompliance with security policies and procedures· Coordinates regularly with Information SystemsSecurity Officers (ISSO) and Network Security Officers(NSO), who provide system-level INFOSEC supportwithin the confines of the ISSM’s area of responsibility· Maintains an Activity INFOSEC Plan (ISSP) andensures the development of System Security Plans (SSP)for systems that contain sensitive information.Qualifications/PrerequisitesNo specific formal degree program is required for the ISSMrole. However, extensive experience in INFOSEC is requiredand a technical background in computer science, mathematics,engineering, or a related field is extremely beneficial. This3
Page 1: Department of the Navy NAVSO P-5239
Page 5: NAVSO P-5239-04SEPTEMBER 1995FOREWO
Page 8 and 9: NAVSO P-5239-04SEPTEMBER 1995TABLE
Page 12 and 13: NAVSO P-5239-04SEPTEMBER 1995techni
Page 14 and 15: NAVSO P-5239-04SEPTEMBER 1995ISEASS
Page 16 and 17: NAVSO P-5239-04SEPTEMBER 19953.0 IN
Page 18 and 19: NAVSO P-5239-04SEPTEMBER 1995· Sit
Page 20 and 21: NAVSO P-5239-04SEPTEMBER 1995the DO
Page 22 and 23: NAVSO P-5239-04SEPTEMBER 19953.2 Ri
Page 24 and 25: NAVSO P-5239-04SEPTEMBER 1995workin
Page 26 and 27: NAVSO P-5239-04SEPTEMBER 19953.3 Ac
Page 28 and 29: NAVSO P-5239-04SEPTEMBER 19953.4 Ad
Page 30 and 31: NAVSO P-5239-04SEPTEMBER 1995Virus
Page 32 and 33: NAVSO P-5239-04SEPTEMBER 19953.5 Tr
Page 34 and 35: NAVSO P-5239-04SEPTEMBER 1995- Expl
Page 36 and 37: NAVSO P-5239-04SEPTEMBER 19953.6 Ph
Page 38 and 39: NAVSO P-5239-04SEPTEMBER 1995· Eva
Page 40 and 41: NAVSO P-5239-04SEPTEMBER 19953.7 Au
Page 42 and 43: NAVSO P-5239-04SEPTEMBER 19953.8 In
Page 44 and 45: NAVSO P-5239-04SEPTEMBER 19953.9 Se
Page 46 and 47: NAVSO P-5239-04SEPTEMBER 19953.10 C
Page 48 and 49: NAVSO P-5239-04SEPTEMBER 19953.11 S
Page 50 and 51: NAVSO P-5239-04SEPTEMBER 199542
Page 52 and 53: NAVSO P-5239-04SEPTEMBER 1995update
Page 55 and 56: NAVSO P-5239-04SEPTEMBER 1995Securi
Page 57 and 58: NAVSO P-5239-04SEPTEMBER 1995SECNAV
Page 59 and 60: NAVSO P-5239-04SEPTEMBER 1995This d
Page 61 and 62:
NAVSO P-5239-04SEPTEMBER 1995NCSC-T
Page 63 and 64:
NAVSO P-5239-04SEPTEMBER 1995NTISSP
Page 65 and 66:
NAVSO P-5239-04SEPTEMBER 1995primar
show all

Information Systems Security Manager (ISSM) - Marine Corps ...

You also want an ePaper? Increase the reach of your titles

Delete template?

Save as template?