Description
Appoint a senior information security official with the mission and resources to coordinate, develop, implement, and maintain an organization-wide information security program.
Supplemental Guidance
The senior information security official is an organizational official. For federal agencies, this official is the senior agency information security officer (SAISO) or chief information security officer (CISO) with the mission and resources to coordinate, develop, implement, and maintain an organization-wide information security program. The security official is an inherent United States Government authority and is assigned to or created by the organization, not the information system.
Changes from Rev 4
Title changed from 'Senior Information Security Officer' to 'Information Security Program Leadership Role'. Broadened to emphasize mission and resources.