ISC2 Exam ISSEP Topic 3 Question 38 Discussion

An Authorizing Official plays the role of an approver. The responsibilities of an Authorizing Official

are as follows:

Ascertains the security posture of the organization's information system.

Reviews security status reports and critical security documents.

Determines the requirement of reauthorization and reauthorizes information systems when

required.

Answer option D is incorrect. The Senior Agency Information Security Officer establishes and

implements the organization's continuous monitoring program.