Information Systems Security Manager (ISSM) - Marine Corps ...

NAVSO P-5239-04SEPTEMBER 19953.0 INFORMATION SYSTEMS SECURITY MANAGERRESPONSIBILITIESThe ISSM is responsible for ensuring that the INFOSEC Program requirements aremet. The ISSM accomplishes this by performing, directing, coordinating, administering, andoverseeing various activities and personnel. This section defines the responsibilities of theISSM in 11 task areas.3.1 Security ManagementThis section describes the responsibilities of the ISSM within the overall task area ofsecurity management, which is the umbrella covering the other 10 task areas. It specificallyfocuses on planning and coordinating tasks required for an effective INFOSEC program.SECURITY POLICY AND PROCEDURES DEVELOPMENT ANDAPPLICATIONResponsibilityThe ISSM is responsible for interpreting and tailoring DOD andDON security policy to meet the requirements of the Commandor activity and ISs and networks under the ISSM’s cognizance.ImplementationPolicy and ProceduresApplicationThe ISSM remains current with all DOD and DON INFOSECpolicies and procedures and is aware of changes to thesepolicies and procedures. The ISSM ensures that all INFOSECactivity within the respective Command is in accordance withDOD and DON policy and procedures. The ISSM tailors thispolicy and guidance to meet the specific Command’srequirements.Key DocumentDevelopmentThe ISSM ensures that activity-level INFOSEC policy andguidelines are documented in an Activity ISSP in accordancewith OPNAVINST 5239.1A.The ISSM also ensures the development of SSPs for each ISthat contains or processes sensitive information in accordancewith OMB Bulletin No. 90-08.8