Information Systems Security Manager (ISSM) - Marine Corps ...

NAVSO P-5239-04SEPTEMBER 1995technical background must be balanced with effectivemanagement skills, because the ISSM must interact with peopleat all levels of the organization.The ISSM’s security education and work experience shouldprovide familiarity with all aspects of INFOSEC , frompersonnel security to emanations security . Security trainingshould include DOD and DON security courses (e.g., NavyAutomated Data Processing Security Officer [ ADPSO] Course,Introduction to Computer Security or equivalent courses ). TheISSM should be familiar, through work experience, with theISSO and NSO roles and responsibilities.RelationshipsIn executing security responsibilities, the ISSM interacts withactivities and personnel within and external to the site securityorganization. This section defines the roles of the activities andpersonnel as related to INFOSEC that directly interface with theISSM. Some of the positions described below may not exist inall Commands. Specifically, the assignment of positions isdependent on the Command structure and is at the discretion ofthe DAA.Personnel/ActivityINFOSEC RoleDAANSMThe DAA is responsible for ensuringcompliance with the DON INFOSEC Programfor the activities and ISs under the DAA’sjurisdiction. The DAA grants interim and finalapproval to operate an IS in a specific securitymode based on a review of the accreditationdocumentation and a confirmation that theresidual risk is within acceptable limits.The Network Security Manager (NSM) acts asthe focal point and principal advisor fornetwork security matters. Depending on thesize of the activity, the geographicaldistribution, and the complexity of the site, thisrole may be performed by the ISSM.4