Who establishes, documents, and monitors classified Information System programs and procedures?

• A. Information System Security Manager (ISSM)
• B. Counterintelligence Special Agent (CISA)
• C. Facility Security Officer (FSO)
• D. DOD Inspector General

Answer: (A)

Establishing, documenting, and monitoring the security posture of classified information systems is the responsibility of the Information System Security Manager. This role acts as the security program owner for the system, overseeing the development and maintenance of the System Security Plan, policies, and procedures, and ensuring continual compliance through ongoing monitoring and assessment. The ISSM coordinates with key stakeholders—such as system owners and the authorizing official—to implement required security controls, manage risk, and respond to incidents.

The other roles don’t fit this scope: a Counterintelligence Special Agent focuses on counterintelligence investigations; a Facility Security Officer handles physical security and facility clearance matters; and the Department of Defense Inspector General conducts audits and investigations across programs.