ISSO

The title for the highestranking MIS officer in the organization.
[view]

Individual responsible to the OA ISSO, designated approving authority, or information system owner for ensuring that the appropriate operational security posture is maintained for an information system or a closely related group of systems.
[view]

Individual responsible to the ISSM for ensuring the appropriate operational IA posture is maintained for a system, program, or enclave.
[view]

A list developed and maintained by the information systems security officer of personnel who are authorized unescorted access to the computer room.
[view]

A method of isolating information resources based on a user’s need to have access to that resource in order to perform their job but no more; for example, a personnel officer needs access to sensitive personnel records and a marketing manager needs access to sensitive marketing information but not vice versa. The terms “needtoknow” and “least privilege” express the same idea. Needtoknow is generally applied to people, while least privilege is generally applied to processes. Necessity for access to, or knowledge or possession of, specific official information required to carry out official duties.
[view]