Chief information officer

{
  "id": "MLC-T-CYB-000648",
  "term": "Chief information officer",
  "field": "Cybersecurity",
  "definition": "1. Agency official responsible for: (i) providing advice and other assistance to the head of the executive agency and other senior management personnel of the agency to ensure that information technology is acquired and information resources are managed in a manner that is consistent with laws, Executive Orders, directives, policies, regulations, and priorities established by the head of the agency; (ii) developing, maintaining, and facilitating the implementation of a sound and integrated information technology architecture for the agency; and (iii) promoting the effective and efficient design and operation of all major information resources management processes for the agency, including improvements to work processes of the agency.\n\n2. Executive agency official responsible for:\n(1) providing advice and other assistance to the head of the executive agency and other senior management personnel of the executive agency to ensure that information technology is acquired and information resources are managed in a manner that is consistent with laws, Executive Orders, directives, policies, regulations, and priorities established by the head of the agency;\n(2) developing, maintaining, and facilitating the implementation of a sound and integrated information technology architecture for the executive agency; and\n(3) promoting the effective and efficient design and operation of all major information resources management processes for the executive agency, including improvements to work processes of the executive agency.\nNote: Organizations subordinate to federal agencies may use the term Chief Information Officer to denote individuals filling positions with similar security responsibilities to agency-level Chief Information Officers.\n\n3. The senior official that provides advice and other assistance to the head of the agency and other senior management personnel of the agency to ensure that IT is acquired and information resources are managed for the agency in a manner that achieves the agency’s strategic goals and information resources management goals; and is responsible for ensuring agency compliance with, and prompt, efficient, and effective implementation of, the information policies and information resources management responsibilities, including the reduction of information collection burdens on the public.\n\n4. Agency official responsible for:\n(i) Providing advice and other assistance to the head of the executive agency and other senior management personnel of the agency to ensure that information technology is acquired and information resources are managed in a manner that is consistent with laws, Executive Orders, directives, policies, regulations, and priorities established by the head of the agency;\n(ii) Developing, maintaining, and facilitating the implementation of a sound and integrated information technology architecture for the agency; and\n(iii) Promoting the effective and efficient design and operation of all major information resources management processes for the agency, including improvements to work processes of the agency.\n\n5. Agency official responsible for:\n1) Providing advice and other assistance to the head of the executive agency and other senior management personnel of the agency to ensure that information technology is acquired and information resources are managed in a manner that is consistent with laws, Executive Orders, directives, policies, regulations, and priorities established by the head of the agency;\n2) Developing, maintaining, and facilitating the implementation of a sound and integrated information technology architecture for the agency; and\n3) Promoting the effective and efficient design and operation of all major information resources management processes for the agency, including improvements to work processes of the agency.\n\n6. Agency official responsible for:\n(i) Providing advice and other assistance to the head of the executive\nagency and other senior management personnel of the agency to ensure\nthat information technology is acquired and information resources are\nmanaged in a manner that is consistent with laws, Executive Orders,\ndirectives, policies, regulations, and priorities established by the head of\nthe agency;\n(ii) Developing, maintaining, and facilitating the implementation of a\nsound and integrated information technology architecture for the agency;\nand\n(iii) Promoting the effective and efficient design and operation of all\nmajor information resources management processes for the agency,\nincluding improvements to work processes of the agency.\n\n7. Organization’s official responsible for: (i) Providing advice and other assistance to the head of the organization and other senior management personnel of the organization to ensure that information technology is acquired and information resources are managed in a manner that is consistent with laws, directives, policies, regulations, and priorities established by the head of the organization; (ii) Developing, maintaining, and facilitating the implementation of a sound and integrated information technology architecture for the organization; and (iii) Promoting the effective and efficient design and operation of all major information resources management processes for the organization, including improvements to work processes of the organization. Note: A subordinate organization may assign a chief information officer to denote an individual filling a position with security responsibilities with respect to the subordinate organization that are similar to those that the chief information officers fills for the organization to which they are subordinate.",
  "abbreviation": "CIO",
  "references": [
    "FIPS 200 from 44 U.S.C., Sec. 5125(b)",
    "CNSSI 4009-2022 from 40 U.S.C., Sec. 11315 (b) (adapted)",
    "NIST SP 800-128; NIST SP 800-37 Rev. 2 from OMB Circular A-130 (2016); NIST SP 800-53 Rev. 5 from OMB Circular A-130 (2016); NIST SP 800-53A Rev. 5 from OMB Circular A-130 (2016)",
    "NIST SP 800-128 from PL 104-106, Sec. 5125(b); NIST SP 800-30 Rev. 1 from PL 104-106, Sec. 5125(b); NISTIR 8170 from PL 104-106, Sec. 5125(b); NIST SP 800-39 from PL 104-106, Sec. 5125(b)",
    "NIST SP 800-137 from PL 104-106, Sec. 5125(b)",
    "NIST SP 800-60 Vol. 1 Rev. 1 from PL 104-106, Sec. 5125(b); NIST SP 800-60 Vol. 2 Rev. 1 from PL 104-106, Sec. 5125(b)",
    "NIST SP 1800-16B; NIST SP 1800-16C",
    "NIST CSRC Glossary"
  ],
  "url": "https://mlchart.com/terminology/cybersecurity/chief-information-officer/"
}