Information System Security Officer (ISSO)

See system security officer (SSO).


See the following for more information:
NIST SP 800-30 Rev. 1 under Information System Security Officer
NIST SP 800-39 under Information System Security Officer
NIST SP 800-60 Vol. 1 Rev. 1 under Information System Security Officer from CNSSI 4009 – Adapted
NIST SP 800-60 Vol. 2 Rev. 1 under Information System Security Officer from CNSSI 4009 – Adapted

Individual assigned responsibility by the senior agency information security officer, authorizing official, management official, or information system owner for ensuring that the appropriate operational security posture is maintained for an information system or program.


See the following for more information:
NIST SP 800-18 Rev. 1 under Information System Security Officer from CNSSI 4009 – Adapted
NISTIR 8170 under Information System Security Officer

Individual assigned responsibility for maintaining the appropriate operational security posture for an information system or program. [Note: ISSO responsibility may be assigned by the senior agency information security officer, authorizing official, management official, or information system owner.]


See NIST SP 800-128 under Information System Security Officer for more information.

Share this Post