Information Systems Security Manager (ISSM) - Marine Corps ...

NAVSO P-5239-04SEPTEMBER 1995Virus Control andReporting ProgramOversightThe ISSM provides oversight and guidance to the ISSO andNSO in implementing a virus control and reporting programthat ensures proper measures are taken to protect the IS fromcomputer viruses. The ISSM reports all virus attacks to theNaval Computer Incident Response Team (NAVCIRT) andensures that the ISSO and NSO:· Implement training programs to educate users in thedangers of computer viruses, virus protection methods,and virus reporting procedures· Work with system administrators to implementprocedures for reporting actual or suspected viruses· Work with system administrators to choose and acquiresuitable software to protect the IS against viruses.Reference: For more information, see section 3.8, Incident andViolation Reporting. Also see NAVSO P-5239-19, ComputerIncident Response Guidebook.Security “Watchdog”OversightThe ISSM provides oversight and guidance to the ISSO andNSO in implementing the security “watchdog” role.Specifically, this function (performed by the ISSO and NSO)includes monitoring system use and conducting random floorand system component checks to ensure compliance withCommand INFOSEC policies and procedures.Reference: For more information concerning floor checks seeNAVSO P-5239-07, the Information Systems Security OfficerGuidebook, or NAVSO P-5239-08, the Network SecurityOfficer Guidebook.22