Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions
Mail Us support@pass4success.com
Location US
Mob_nav_barsMENU

ISC2 ISSEP Exam - Topic 3 Question 38 Discussion

An Authorizing Official plays the role of an approver. What are the responsibilities of an AuthorizingOfficial? Each correct answer represents a complete solution. Choose all that apply.
A) Ascertaining the security posture of the organization's information system and B) Reviewing security status reports and critical security documents and C) Determining the requirement of reauthorization and reauthorizing information systems when required
D) Establishing and implementing the organization's continuous monitoring program

ISC2 ISSEP Exam - Topic 3 Question 38 Discussion

Actual exam question for ISC2's ISSEP exam
Question #: 38
Topic #: 3
[All ISSEP Questions]

An Authorizing Official plays the role of an approver. What are the responsibilities of an Authorizing

Official? Each correct answer represents a complete solution. Choose all that apply.

Show Suggested Answer Hide Answer
Suggested Answer: A, B, C

An Authorizing Official plays the role of an approver. The responsibilities of an Authorizing Official

are as follows:

Ascertains the security posture of the organization's information system.

Reviews security status reports and critical security documents.

Determines the requirement of reauthorization and reauthorizes information systems when

required.

Answer option D is incorrect. The Senior Agency Information Security Officer establishes and

implements the organization's continuous monitoring program.


by Chanel at May 06, 2022, 11:00 AM

Limited Time Offer

25%

Off

Get Premium ISSEP Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

0/2000 characters
Submit Cancel
Henriette
8 months ago
I agree, continuous monitoring is usually a separate team’s job.
upvoted 0 times
...
Pansy
9 months ago
Wait, they have to do all that? That's a lot!
upvoted 0 times
...
Rodrigo
9 months ago
D seems a bit off to me, not sure if that's part of their role.
upvoted 0 times
...
Suzan
9 months ago
I think B and C are also spot on.
upvoted 0 times
...
Penney
9 months ago
A is definitely one of the responsibilities!
upvoted 0 times
...
Lavonne
9 months ago
Establishing the continuous monitoring program sounds familiar, but I’m not entirely confident if that falls under the Authorizing Official's duties.
upvoted 0 times
...
Elke
9 months ago
I feel like determining reauthorization requirements is important too, but I can't recall if it's explicitly listed as a responsibility.
upvoted 0 times
...
Candida
9 months ago
I remember practicing a question similar to this, and I think reviewing security status reports is also a key responsibility.
upvoted 0 times
...
Roxane
9 months ago
I think the Authorizing Official definitely needs to ascertain the security posture of the organization, but I'm not sure if that's the only responsibility.
upvoted 0 times
...
Gayla
9 months ago
Alright, let's see here. The image shows some kind of storage setup, and the question is asking about the capabilities of this JBOD. I'll need to make sure I understand the differences between the answer choices.
upvoted 0 times
...
Willow
9 months ago
I'm a little confused by the options. Some of them seem more related to financial or customer measures rather than internal processes. I'll need to carefully review the Balanced Scorecard framework to make sure I choose the right one.
upvoted 0 times
...
Audra
10 months ago
Definitely social engineering! I recall this was highlighted in our textbook as a major tactic used by attackers.
upvoted 0 times
...

Save Cancel