Which choice below is a role of the Information Systems Security Officer?

A.
The ISO is responsible for examining systems to see whether they are meeting stated security
requirements.

B.
The ISO is responsible for day-to-day security administration.

C.
The ISO is responsible for following security procedures and reporting security problems.

D.
The ISO establishes the overall goals of the organization’s computer security program.

Explanation:
Answer “The ISO establishes the overall goals of the organization’s computer security program” is a
responsibility of senior management. Answer “The ISO is responsible for examining systems to see
whether they are meeting stated security requirements” is a description of the role of auditing.
Answer “The ISO is responsible for following security procedures and reporting security problems” is
the role of the user, or consumer, of security in an organization.