Information Systems Security Manager (ISSM) - Marine Corps ...

NAVSO P-5239-04SEPTEMBER 1995ISEASSASystem orNetworkAdministratorUserThe ISEA is responsible for implementinghardware (and total system) changes to thesystem and must coordinate with the ISSM toensure compliance with INFOSEC policies.The SSA is responsible for implementingsoftware-related changes to the system, andmust coordinate these changes with the ISSMto ensure no negative effect on the securityposture of the IS results from a change.The System or Network Administrator isresponsible for the administration andoperation of an IS and ensures the IS operatesin accordance with Command security policiesand procedures. The System or Networkadministrator also implements changes to anIS, such as software upgrades, which aredirected, in many cases, by the SSA or ISEA.In this document, the term “user” refers to allpersonnel who access the IS for authorizedpurposes and in accordance with securityprocedures and guidelines (i.e., users,operators, and maintainers). The ISSM ensuresthat the IS users are aware of their securityresponsibilities and are trained in the usersecurity features of the IS.Figure 1 illustrates the relationship of the ISSM to the security roles and titles within andexternal to the site INFOSEC organization.6