MENU
An Authorizing Official plays the role of an approver. What are the responsibilities of an Authorizing
Official? Each correct answer represents a complete solution. Choose all that apply.
Suggested Answer: A, B, C
Get Premium ISSEP Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
An Authorizing Official plays the role of an approver. The responsibilities of an Authorizing Official
are as follows:
Ascertains the security posture of the organization's information system.
Reviews security status reports and critical security documents.
Determines the requirement of reauthorization and reauthorizes information systems when
required.
Answer option D is incorrect. The Senior Agency Information Security Officer establishes and
implements the organization's continuous monitoring program.
12 comments · newest first
HE
Henriette
11 months ago
I agree, continuous monitoring is usually a separate team’s job.
PA
Pansy
12 months ago
Wait, they have to do all that? That's a lot!
RO
Rodrigo
12 months ago
D seems a bit off to me, not sure if that's part of their role.
SU
Suzan
12 months ago
I think B and C are also spot on.
PE
Penney
1 year ago
A is definitely one of the responsibilities!
LA
Lavonne
1 year ago
Establishing the continuous monitoring program sounds familiar, but I’m not entirely confident if that falls under the Authorizing Official's duties.
EL
Elke
1 year ago
I feel like determining reauthorization requirements is important too, but I can't recall if it's explicitly listed as a responsibility.
CA
Candida
1 year ago
I remember practicing a question similar to this, and I think reviewing security status reports is also a key responsibility.
RO
Roxane
1 year ago
I think the Authorizing Official definitely needs to ascertain the security posture of the organization, but I'm not sure if that's the only responsibility.
GA
Gayla
1 year ago
Alright, let's see here. The image shows some kind of storage setup, and the question is asking about the capabilities of this JBOD. I'll need to make sure I understand the differences between the answer choices.
WI
Willow
1 year ago
I'm a little confused by the options. Some of them seem more related to financial or customer measures rather than internal processes. I'll need to carefully review the Balanced Scorecard framework to make sure I choose the right one.
AU
Audra
1 year ago
Definitely social engineering! I recall this was highlighted in our textbook as a major tactic used by attackers.