Which of the following individuals is responsible for ensuring the security posture of the
organization’s information system?

A.
Common Control Provider

B.
Security Control Assessor

C.
Chief Information Officer

D.
Authorizing Official