system security officer

{
  "id": "MLC-T-CYB-004212",
  "term": "system security officer",
  "field": "Cybersecurity",
  "definition": "1. Individual with assigned responsibility for maintaining the appropriate operational security posture for an information system or program.\n\n2. Person responsible to the designated approving authority for ensuring the security of an information system throughout its lifecycle, from design through disposal.\n\n3. See system security officer (SSO).\n\n4. Individual assigned responsibility by the senior agency information security officer, authorizing official, management official, or information system owner for maintaining the appropriate operational security posture for an information system or program\n\n5. Individual with assigned responsibility for maintaining the appropriate operational security posture for a system or program.",
  "abbreviation": "SSO",
  "synonyms": [
    "information system security officer",
    "Information System Security Officer (ISSO)"
  ],
  "references": [
    "NIST SP 800-37 Rev. 2 from CNSSI 4009-2015; NIST SP 800-128 from NIST SP 800-37; NIST SP 800-37 Rev. 2; NIST SP 800-137 from CNSSI 4009",
    "NIST SP 800-32 [Withdrawn] from NSTISSI 4009",
    "CNSSI 4009-2015 from NIST SP 800-30 Rev. 1",
    "NIST SP 800-137A from NIST SP 800-37 Rev. 2",
    "NIST SP 800-53 Rev. 5 from NIST SP 800-37 Rev. 2; NIST SP 800-53A Rev. 5 from NIST SP 800-37 Rev. 2",
    "NIST CSRC Glossary"
  ],
  "url": "https://mlchart.com/terminology/cybersecurity/system-security-officer/"
}