Which of the following is a responsibility of an ISSP/SCA?

• A. Perform classified Information System assessments and make recommendations
• B. Issue security clearances
• C. Manage personnel files
• D. Conduct physical security surveys

Answer: (A)

The main idea is that the ISSP/SCA is focused on evaluating how well information systems handle classified data and then guiding improvements. This role involves reviewing how a system protects confidentiality, integrity, and availability—looking at everything from system boundaries and access controls to encryption, logging, patching, and incident response. The goal is to identify weaknesses and turn them into concrete, actionable recommendations to reduce risk and meet security requirements. That’s why performing classified Information System assessments and making recommendations is the best fit for the role.

Issuing security clearances is handled by the appropriate government or agency security process, not by an ISSP/SCA. Managing personnel files is an HR or security-administration task, not a systems-security assessment task. Conducting physical security surveys concerns facilities and physical safeguards rather than the security of information systems themselves.