Which choice below is a role of the Information Systems Security
Officer?

A.
The ISO is responsible for examining systems to see whether they
are meeting stated security requirements.

B.
The ISO is responsible for day-to-day security administration.

C.
The ISO is responsible for following security procedures and
reporting security problems.

D.
The ISO establishes the overall goals of the organization’s computer
security program.

Explanation:
Answer “The ISO establishes the overall goals of the organization’s computer
security program” is a responsibility of senior management. Answer “The ISO is responsible for
examining systems to see whether they are meeting stated security requirements” is a description
of the role of auditing. Answer “The ISO is responsible for following security procedures and
reporting security problems” is the role of the user, or
consumer, of security in an organization.